OpenSSF/OSV advisory MAL-2026-7421 confirms this npm version as malicious. Malicious code in sitefinitywebapp (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in sitefinitywebapp (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms sitefinitywebapp@99.0.0 as malicious (MAL-2026-7421): Malicious code in sitefinitywebapp (npm)