npm

victim-package-b @1.0.1

Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 1:32 PM UTC

Malicious

OSV ID

MAL-2026-400

Ecosystem

npm

Summary

The package victim-package-b was found to contain malicious code.

Source: amazon-inspector (152e8188fd82f0ea4ee410d725bb96ab33af5767241fcefb555ef8dfaffd39bf)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.