npm

xmorse @1.2.0

Vulnerability report · Last retrieved from osv.dev June 23, 2026 at 3:29 AM UTC

Malicious

OSV ID

MAL-2026-4159

Ecosystem

npm

Summary

The package xmorse was found to contain malicious code.

Source: amazon-inspector (071a7f36a645d7ae5c231f30aca8bc53d5fb495070309136c5e16d28dba3c9f4)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.