generic-means-ing-feat-scanner-libs

Ecosystem: npm

Downloads:

Vulnerabilities from the last (months)
  • 0CriticalAffects 0 versions
  • 0HighAffects 0 versions
  • 0MediumAffects 0 versions
  • 0ModerateAffects 0 versions
  • 0LowAffects 0 versions
Severity distribution (all time)
0vulnerabilities
  • Critical0 (0.0%)
  • High0 (0.0%)
  • Medium0 (0.0%)
  • Moderate0 (0.0%)
  • Low0 (0.0%)

Monthly breakdown

  • 0 vulnerabilities
    • Critical: 0
    • High: 0
    • Medium: 0
    • Moderate: 0
    • Low: 0

Vulnerabilities (1)

Known vulnerabilities affecting generic-means-ing-feat-scanner-libs, based on data from OSV.

Vulnerabilities affecting generic-means-ing-feat-scanner-libs
IDSeveritySummaryAffected versionsPublishedSource
MAL-2026-18281UnknownMalicious code in @generic-means/ing-feat-scanner-libs (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (7053eaf141232704108519a3b3e7a0f1197d9eaabfa9fd3f4ff56ae9f753d763) package.json declares its sole dependency `ltidisafe` as a bare HTTPS tarball URL (`https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.9.3.tgz`) rather than a registry version range or a git ref pinned to a commit SHA. On `npm install`, npm fetches whatever bytes that URL currently returns and installs the resulting package, running any lifecycle scripts it contains. The tarball is unpinned, has no integrity hash, is not resolved th
  • all
OSV (opens in a new tab)
  • MAL-2026-18281Unknown
    Malicious code in @generic-means/ing-feat-scanner-libs (npm)
    • all

    --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (7053eaf141232704108519a3b3e7a0f1197d9eaabfa9fd3f4ff56ae9f753d763) package.json declares its sole dependency `ltidisafe` as a bare HTTPS tarball URL (`https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.9.3.tgz`) rather than a registry version range or a git ref pinned to a commit SHA. On `npm install`, npm fetches whatever bytes that URL currently returns and installs the resulting package, running any lifecycle scripts it contains. The tarball is unpinned, has no integrity hash, is not resolved th

Showing 1-1 of 1 vulnerabilities