pkgscan.dev npm package scan report
Is npm-scanner 0.0.0-stage safe?
pkgscan.dev flagged npm-scanner 0.0.0-stage as malicious on 2026-11-10: it matches published malware advisory MAL-2026-19071. Do not install this npm package. If it is already installed, remove it and rotate any credentials or tokens it could have read.
Malware advisory match Status: completed
Dependency-health note: 1 engine reports release recency, deprecation or low usage — not a finding about the file.
Full findings from every engine are public — no account required.
| Scan status | completed |
|---|---|
| Engines | 6 engines reported |
| Engine coverage | 6 of 6 engines reported. |
| Malware flags | 0 engines flagged this artifact as malicious |
| Malware advisories | MAL-2026-19071 |
| Issues reported | 1 engine reported security issues (for example known vulnerabilities) |
| First seen | 2026-11-10 |
| Analyzed | 2026-11-10 |
| SHA-256 | b78aa65d37746d5b9bff8ab0f4bc373233a90a57b22f28c626899b337326be9f |
| Package URL | pkg:npm/npm-scanner@0.0.0-stage |
Engines
- Clean argus
- Release health depsdev
- Clean grype
- Clean guarddog
- Issues reported osv
- Clean skillspector
Scanned versions
- npm-scanner@0.0.0-stage — scanned 2026-11-10 this version
- npm-scanner@0.0.1-security — scanned 2026-11-10