OpenSSF/OSV advisory MAL-2026-3374 confirms this npm version as malicious. The package playgod was found to contain malicious code.
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in playgod (npm)
Details
The package playgod was found to contain malicious code.
## Source: ossf-package-analysis (a700663ab039dd35fa24734d883219fff845bb0c6017a5e0dcb0191dfa4676b0) The OpenSSF Package Analysis project identified 'playgod' @ 1.1.2 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
- The package executes one or more commands associated with malicious behavior.
Decision reason
OpenSSF Malicious Packages via OSV confirms playgod@1.1.2 as malicious (MAL-2026-3374): Malicious code in playgod (npm)