Malicious
OSV ID
MAL-2026-11019
Ecosystem
npm
Summary
No a static rule matches and no traced code behavior indicating exfiltration, install-time remote code execution, silent relay, credential distribution, backdoor, or self-propagation were observed in this package version. The package contains only 6 files and exhibits no lifecycle scripts, top-level network calls, credential reads, or fetch-and-execute patterns tied to installer harm.
Source: amazon-inspector (05d4b49dfdad9ef3eb4605e61998fab98f41bb282c48020b91492ea25f0c0d97)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.