0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
integration-amplitude
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting integration-amplitude, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-15510 | Unknown | Malicious code in integration-amplitude (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (dcd9ffdf0c07f64af4034ec76aea284a6290f4633f2c80eefa65579c1a297bfb) package.json declares the package's own name as a dependency whose source is the bare HTTPS URL https://repo.securityctrl.com/integration-amplitude rather than a registry version range. On npm install, npm fetches whatever bytes that host serves and installs them, executing any lifecycle scripts contained inside, with no version pin and no integrity check. The shipped index.js is a 3-line stub, so this manifest line is the sole install-time |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (dcd9ffdf0c07f64af4034ec76aea284a6290f4633f2c80eefa65579c1a297bfb) package.json declares the package's own name as a dependency whose source is the bare HTTPS URL https://repo.securityctrl.com/integration-amplitude rather than a registry version range. On npm install, npm fetches whatever bytes that host serves and installs them, executing any lifecycle scripts contained inside, with no version pin and no integrity check. The shipped index.js is a 3-line stub, so this manifest line is the sole install-time