npm
Maliciouswin-build-utils@1.0.0
Vulnerability report · Last retrieved from osv.dev October 7, 2026 at 11:33 AM UTC
OSV ID
MAL-2026-10905
Ecosystem
npm
Summary
The package name suggests a Windows build helper utility, but no concrete behavioral evidence is available to confirm or refute installer-side risk. No exfiltration, install-time fetch, credential access, or other attack-class behavior was observed. The package warrants human review to confirm contents and intent before issuing a public verdict.
Source: amazon-inspector (03bd3facc00c36861223058a572fbaa888d815a06c7b309c44639c544c65f1d9)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.