Note: This report is updated by a verification record
osv MAL-2026-2619: Malicious code in upstartloans (npm)
The package is marked as malware by OSV: MAL-2026-2619 with source: ghsa-malware
MAL-2026-2619
ghsa-malware