npm
Malicious@anchor-ds/core@99.9.0
Vulnerability report · Last retrieved from osv.dev October 7, 2026 at 1:33 PM UTC
OSV ID
MAL-2026-1585
Ecosystem
npm
Summary
The package @anchor-ds/core was found to contain malicious code.
Source: amazon-inspector (9aaac3fbc20e4d10a4fcf379fa4637f05e1dccd9fb6123bdd9b0e26ce5e21854)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.