Note: This report is updated by a verification record
osv MAL-2026-2498: Malicious code in df-sandbox-test (npm)
The package is marked as malware by OSV: MAL-2026-2498 with source: amazon-inspector
Note: This report is updated by a verification record