npm
Maliciousdsh-volcengine-provider@0.2.8
Vulnerability report · Last retrieved from osv.dev October 30, 2026 at 1:02 AM UTC
OSV ID
MAL-2026-18374
Ecosystem
npm
Summary
Analysis of dsh-volcengine-provider 0.2.8 produced no evidence of installer-side attack behavior: no install-time lifecycle scripts fetching or executing remote code, no credential or environment-variable harvesting, no silent relay of caller data to attacker-controlled destinations, no backdoor/reverse-shell mechanism, and no self-propagation or dropper patterns across the 45 files inspected.
Source: amazon-inspector (10d3dafa3da7dea0655bf429e4da622be99e705dd12cbfffb381a0f987f6b550)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.