pkgscan.dev npm package scan report
Is mock-data-sdk 1.0.1 safe?
1 of 6 security engines flagged mock-data-sdk 1.0.1 as malicious when pkgscan.dev scanned it on 2026-11-10. Do not install this npm package. If it is already installed, remove it and rotate any credentials or tokens it could have read.
Flagged by 1 scanner Status: completed
Dependency-health note: 1 engine reports release recency, deprecation or low usage — not a finding about the file. Capability note: 1 engine matched low-severity capabilities that build tools normally use (filesystem, network, process) — not a malware finding.
Full findings from every engine are public — no account required.
| Scan status | completed |
|---|---|
| Engines | 6 engines reported |
| Engine coverage | 6 of 6 engines reported. |
| Malware flags | 1 engine flagged this artifact as malicious |
| Issues reported | 0 engines reported security issues (for example known vulnerabilities) |
| First seen | 2026-11-10 |
| Analyzed | 2026-11-10 |
| SHA-256 | 2db380d92abe5108f49be070027936529f36fbdb566f632c36128facad8d0753 |
| Package URL | pkg:npm/mock-data-sdk@1.0.1 |
Engines
- Flagged argus
- Release health depsdev
- Clean grype
- Capabilities noted guarddog
- Clean osv
- Clean skillspector
Scanned versions
- mock-data-sdk@1.0.1 — scanned 2026-11-10 this version