pkgscan.dev npm package scan report
Is @postex/common 0.0.1-security safe?
pkgscan.dev flagged @postex/common 0.0.1-security as malicious on 2026-11-10: it matches published malware advisory MAL-2026-18285. Do not install this npm package. If it is already installed, remove it and rotate any credentials or tokens it could have read.
Malware advisory match Status: completed
Full findings from every engine are public — no account required.
| Scan status | completed |
|---|---|
| Engines | 6 engines reported |
| Engine coverage | 6 of 6 engines reported. |
| Malware flags | 0 engines flagged this artifact as malicious |
| Malware advisories | MAL-2026-18285 |
| Issues reported | 2 engines reported security issues (for example known vulnerabilities) |
| First seen | 2026-11-10 |
| Analyzed | 2026-11-10 |
| SHA-256 | be9efde686fe91b8df4ca27ffa5fa7cbfe576e96be4f78650db459075caa94b2 |
| Package URL | pkg:npm/@postex/common@0.0.1-security |
Engines
- Clean argus
- Issues reported depsdev
- Clean grype
- Clean guarddog
- Issues reported osv
- Clean skillspector
Scanned versions
- postex/common@0.0.0-stage — scanned 2026-11-10
- postex/common@0.0.1-security — scanned 2026-11-10 this version