SafeDep
Install GitHub App
Start for Free
SafeDep
Install GitHub App
Start for Free

Summary

Note: This report is updated by a verification record

osv MAL-2026-2524: Malicious code in a2a-chat-canvas (npm)

Verification Record

The package is marked as malware by OSV: MAL-2026-2524 with source: amazon-inspector

Details

Note: This report is updated by a verification record

a2a-chat-canvas@97.9.9Malicious
Verified
Analysed at: 10/11/26, 1:36 AM
Source: -
SHA256:
Confidence: High