registry / @client-web-next/ab-tests / 0.0.1

@client-web-next/ab-tests@0.0.1

Security research - scope ownership proof

OSV Malicious Advisory

imported 15d ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-16494 confirms this npm version as malicious. Malicious code in @client-web-next/ab-tests (npm)

Advisory

MAL-2026-16494

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in @client-web-next/ab-tests (npm)

Decision reason

OpenSSF Malicious Packages via OSV confirms @client-web-next/ab-tests@0.0.1 as malicious (MAL-2026-16494): Malicious code in @client-web-next/ab-tests (npm)

References

OSV advisory

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

Source & flagged code

0 flagged · loading source

No flagged code excerpts are attached to this scan.

Findings

1 High

HighOsv Malicious Advisory

Affected versions and remediation

This report applies to @client-web-next/ab-tests@0.0.1.

See version security history for other recorded verdicts.

Avoid installing @client-web-next/ab-tests@0.0.1. Remove it from direct dependencies and check your lockfile for transitive copies.