pkgscan.dev npm package scan report
Is npm-scanner 0.0.1-security safe?
pkgscan.dev flagged npm-scanner 0.0.1-security as malicious on 2026-11-10: it matches published malware advisory MAL-2026-19071. Do not install this npm package. If it is already installed, remove it and rotate any credentials or tokens it could have read.
Malware advisory match Status: completed
Full findings from every engine are public — no account required.
| Scan status | completed |
|---|---|
| Engines | 6 engines reported |
| Engine coverage | 6 of 6 engines reported. |
| Malware flags | 0 engines flagged this artifact as malicious |
| Malware advisories | MAL-2026-19071 |
| Issues reported | 2 engines reported security issues (for example known vulnerabilities) |
| First seen | 2026-11-10 |
| Analyzed | 2026-11-10 |
| SHA-256 | 525d7650492bd2848e8cadc0703c720112da9683f5edd74e5a61f8b550ce52ae |
| Package URL | pkg:npm/npm-scanner@0.0.1-security |
Engines
- Clean argus
- Issues reported depsdev
- Clean grype
- Clean guarddog
- Issues reported osv
- Clean skillspector
Scanned versions
- npm-scanner@0.0.0-stage — scanned 2026-11-10
- npm-scanner@0.0.1-security — scanned 2026-11-10 this version