SafeDep
Install GitHub App
Start for Free
SafeDep
Install GitHub App
Start for Free

Summary

Note: This report is updated by a verification record

osv MAL-2026-1383: Malicious code in @immuta/pxl-components (npm)

Verification Record

The package is marked as malware by OSV: MAL-2026-1383. However, Immuta has informed SafeDep that the package was generated from an Immuta-initiated security test artifact intended to demonstrate a malware injection scenario. The package is no longer available publicly.

Details

Note: This report is updated by a verification record

@immuta/pxl-components@99.99.0Clean
Verified
Analysed at: 10/11/26, 1:05 AM
Source: -
SHA256:
Confidence: High