@postman-cse/okta-aio-darwin-arm64: Malicious npm security report

OSV Malicious Advisory

scanned 5h ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-14580 confirms this npm version as malicious. The package '@postman-cse/okta-aio-darwin-arm64' was identified as containing malicious obfuscated code.

Advisory

MAL-2026-14580

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in @postman-cse/okta-aio-darwin-arm64 (npm)

Details

The package '@postman-cse/okta-aio-darwin-arm64' was identified as containing malicious obfuscated code.

Decision reason

No blocking static signals were detected.

References

OSV advisory

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 0 file(s), 0 B of source

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

Source & flagged code

0 flagged · loading source

@postman-cse/okta-aio-darwin-arm64@0.11.6

OSV Malicious Advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code