pkgscan.dev npm package scan report
Is @postex/common 0.0.0-stage safe?
pkgscan.dev flagged @postex/common 0.0.0-stage as malicious on 2026-11-10: it matches published malware advisory MAL-2026-18285. Do not install this npm package. If it is already installed, remove it and rotate any credentials or tokens it could have read.
Malware advisory match Status: completed
Full findings from every engine are public — no account required.
| Scan status | completed |
|---|---|
| Engines | 6 engines reported |
| Engine coverage | 6 of 6 engines reported. |
| Malware flags | 0 engines flagged this artifact as malicious |
| Malware advisories | MAL-2026-18285 |
| Issues reported | 1 engine reported security issues (for example known vulnerabilities) |
| First seen | 2026-11-10 |
| Analyzed | 2026-11-10 |
| SHA-256 | 183a3dfafe9cad404d11f75fb60a6bf784595be31423c83ae3997d95f20d75f0 |
| Package URL | pkg:npm/@postex/common@0.0.0-stage |
Engines
- Clean argus
- Clean depsdev
- Clean grype
- Clean guarddog
- Issues reported osv
- Clean skillspector
Scanned versions
- postex/common@0.0.0-stage — scanned 2026-11-10 this version
- postex/common@0.0.1-security — scanned 2026-11-10