0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
edu-npm-dependency-chain-demo
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting edu-npm-dependency-chain-demo, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-5623 | Unknown | Malicious code in edu-npm-dependency-chain-demo (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (7d5b538a93d9379ce9f4eaa885a4b22c6ec94175718176088b7a432cd67da271) No suspicious code, lifecycle scripts, network destinations, credential reads, or obfuscation were observed in this package. The package name suggests an educational demonstration of dependency chains, and the contents do not exhibit any of the structural fingerprints associated with supply-chain attacks (no install-time fetch-and-execute, no environment scraping, no hardcoded exfil endpoint, no credential-store enumeration). ## Source: gh |
| OSV (opens in a new tab) |
- MAL-2026-5623UnknownMalicious code in edu-npm-dependency-chain-demo (npm)
all
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (7d5b538a93d9379ce9f4eaa885a4b22c6ec94175718176088b7a432cd67da271) No suspicious code, lifecycle scripts, network destinations, credential reads, or obfuscation were observed in this package. The package name suggests an educational demonstration of dependency chains, and the contents do not exhibit any of the structural fingerprints associated with supply-chain attacks (no install-time fetch-and-execute, no environment scraping, no hardcoded exfil endpoint, no credential-store enumeration). ## Source: gh