Note: This report is updated by a verification record
osv MAL-2026-2614: Malicious code in upstart.previewcss (npm)
The package is marked as malware by OSV: MAL-2026-2614 with source: ghsa-malware
Note: This report is updated by a verification record