Malicious
OSV ID
MAL-2026-11070
Ecosystem
npm
Summary
The OpenSSF Package Analysis project identified 'whs4_deu' @ 1.0.1 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.
Source: ossf-package-analysis (96d7709dc56eae4bfe07031da42425b4a94a169255cd7b3bde0f31f0516e0fb0)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.