Note: This report is updated by a verification record
osv MAL-2026-2611: Malicious code in upstart-lending-status (npm)
The package is marked as malware by OSV: MAL-2026-2611 with source: ghsa-malware
Note: This report is updated by a verification record