SafeDep
Install GitHub App
Start for Free
SafeDep
Install GitHub App
Start for Free

Summary

Note: This report is updated by a verification record

osv MAL-2025-6829: Malicious code in tensorflowjs (npm)

Verification Record

Malicious package targeting TensorFlow users through typosquatting. Contains code designed to steal credentials and compromise developer systems.

Details

Note: This report is updated by a verification record

tensorflowjs@0.7.0Malicious
Verified
Analysed at: 10/10/26, 9:34 PM
Source: -
SHA256:
Confidence: High