Note: This report is updated by a verification record
osv MAL-2026-1383: Malicious code in @immuta/pxl-components (npm)
The package is marked as malware by OSV: MAL-2026-1383. However, Immuta has informed SafeDep that the package was generated from an Immuta-initiated security test artifact intended to demonstrate a malware injection scenario. The package is no longer available publicly.
Note: This report is updated by a verification record