node.js
npmv0.0.1-securitysecurity holding package
1 versions2 maintainers0 deps3,567 weekly dl
npm/security-holder49
/ 100
Health
do not use
Do not install. Package is flagged as malicious (advisory MAL-2025-27668).
Health breakdown0 β 100
0/25
maintenance
6/20
popularity
25/25
security
15/15
maturity
3/15
community
Vulnerabilities
1
1 low
Advisories (1)
| Severity | ID | Summary | Fixed in |
|---|---|---|---|
| unknown | MAL-2025-27668 | Malicious code in node.js (npm) | β |
Bundle & TypeScript
π
TypeScript
0/10untyped
No type definitions available
β Malicious package
This package is flagged as malicious by the OpenSSF/OSV community feed. Do not install.
Advisory:
MAL-2025-27668 β Malicious code in node.js (npm)Health History
Dependency Tree
License Audit
API access
Get this data programmatically β free, no authentication.
curl https://depscope.dev/api/check/npm/node.jsFirst published Β· 2013-09-30T02:53:59.847Z
Last updated Β· 2020-03-12T13:35:55.570Z