0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
os-ulid-void
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting os-ulid-void, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-5348 | Unknown | Malicious code in os-ulid-void (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (ae1f330082068d43b4ef645b06ce190fb0354367ab0d98edadd3f15c6c99dea1) The package ships a minified file at dist/payload.js where multiple HTTP POST call sites appear (lines 14503, 14532, 14716, 14834, 15716). The literal evidence captured is only the keyword 'POST' without surrounding context, so the destinations, request bodies, and reachability (install-time vs import-time vs explicit user-call) cannot be determined from the available signals. The package name resembles common ULID utility naming and may be |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (ae1f330082068d43b4ef645b06ce190fb0354367ab0d98edadd3f15c6c99dea1) The package ships a minified file at dist/payload.js where multiple HTTP POST call sites appear (lines 14503, 14532, 14716, 14834, 15716). The literal evidence captured is only the keyword 'POST' without surrounding context, so the destinations, request bodies, and reachability (install-time vs import-time vs explicit user-call) cannot be determined from the available signals. The package name resembles common ULID utility naming and may be