npm

xvxx @1.0.4

Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 10:32 AM UTC

Malicious

OSV ID

MAL-2025-192656

Ecosystem

npm

Summary

The package xvxx was found to contain malicious code.

Source: amazon-inspector (049f454684721f33ed5708e112fc16145101616f1e86764d11c1768029a10902)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.