Logo
npm

ccl-global-shopping@99.9.1

Vulnerability report · Last retrieved from osv.dev October 20, 2026 at 6:20 AM UTC

Malicious

OSV ID

MAL-2026-18061

Ecosystem

npm

Summary

The OpenSSF Package Analysis project identified 'ccl-global-shopping' @ 99.9.1 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

Source: ossf-package-analysis (31f39d40e2c7700b1c070cbd26ea533789dc444daaf58e77d191f7eb10036fc9)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.