Note: This report is updated by a verification record
osv MAL-2026-2612: Malicious code in upstart-loan-status (npm)
The package is marked as malware by OSV: MAL-2026-2612 with source: ghsa-malware
Note: This report is updated by a verification record