pkgscan.dev npm package scan report
Is sauruspro-bail 5.0.3 safe?
1 of 6 security engines flagged sauruspro-bail 5.0.3 as malicious when pkgscan.dev scanned it on 2026-11-08. Do not install this npm package. If it is already installed, remove it and rotate any credentials or tokens it could have read.
Flagged by 1 scanner Status: completed
Dependency-health note: 1 engine reports release recency, deprecation or low usage — not a finding about the file.
Full findings from every engine are public — no account required.
| Scan status | completed |
|---|---|
| Engines | 6 engines reported |
| Engine coverage | 6 of 6 engines reported. |
| Malware flags | 1 engine flagged this artifact as malicious |
| Issues reported | 1 engine reported security issues (for example known vulnerabilities) |
| First seen | 2026-11-08 |
| Analyzed | 2026-11-08 |
| SHA-256 | 4e8ea2c2de1bc05c96a9e3286c36011be0a794a1dee11ec2562c9cf19351c363 |
| Package URL | pkg:npm/sauruspro-bail@5.0.3 |
Engines
- Flagged argus
- Release health depsdev
- Clean grype
- Issues reported guarddog
- Clean osv
- Clean skillspector
Scanned versions
- sauruspro-bail@5.0.2-alpha.spr.test — scanned 2026-11-10
- sauruspro-bail@0.0.0-stage — scanned 2026-11-10
- sauruspro-bail@5.0.2 — scanned 2026-11-08
- sauruspro-bail@5.0.3 — scanned 2026-11-08 this version
- sauruspro-bail@5.0.0 — scanned 2026-11-02
- sauruspro-bail@5.0.1 — scanned 2026-11-02