registry / @public-for-cdao/contracts / 99.99.99

@public-for-cdao/contracts@99.99.99

OSV Malicious Advisory

scanned 14h ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-10884 confirms this npm version as malicious. Malicious code in @public-for-cdao/contracts (npm)

Advisory

MAL-2026-10884

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in @public-for-cdao/contracts (npm)

Decision reason

OpenSSF Malicious Packages via OSV confirms @public-for-cdao/contracts@99.99.99 as malicious (MAL-2026-10884): Malicious code in @public-for-cdao/contracts (npm)

References

OSV advisory OpenSSF JSON

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

Source & flagged code

0 flagged · loading source

No flagged code excerpts are attached to this scan.

Findings

1 High

HighOsv Malicious Advisory