npm

ultimates-express @3.7.7

Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 1:32 PM UTC

Malicious

OSV ID

MAL-2026-1012

Ecosystem

npm

Summary

The package ultimates-express was found to contain malicious code.

Source: amazon-inspector (199dbb458ff55c6d08022e6326014d56aceb99ef7748d6e898a6faac9bff201b)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.