npm
Malicioussiren-lament@2.14.827
Vulnerability report · Last retrieved from osv.dev October 30, 2026 at 1:02 AM UTC
OSV ID
MAL-2025-49247
Ecosystem
npm
Summary
The package contains two files and declares no lifecycle scripts, remote fetches, credential reads, or network exfiltration paths. Version coordinate 0.0.0-stage and minimal file count are consistent with a placeholder or staging publish rather than a functional library. No code paths that would compromise an installer on npm install or require() were identified.
Source: amazon-inspector (66198e889b19f908f338ab5cad00c57bc95194bff8938dcf26c4a853c0b260d8)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.