npm
Maliciousworldskills@1.0.6
Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 4:45 PM UTC
OSV ID
MAL-2025-190492
Ecosystem
npm
Summary
The package worldskills was found to contain malicious code.
Source: amazon-inspector (d245ace818f9e6d4526355bd80129354c139dd0b991e6df6ee6211df41110352)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.