npm
Malicious win-env-setup @3.0.6
Vulnerability report · Last retrieved from osv.dev July 17, 2026 at 9:03 PM UTC
OSV ID
MAL-2026-7439
Ecosystem
npm
Summary
Malicious code in win-env-setup (npm)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.