registry / tinkoff-boxy-atom-text-link / 0.0.1-security
tinkoff-boxy-atom-text-link@0.0.1-security
security holding package
This package appears in our research on the August 2026 dependency confusion campaign, with how it works, the full package list and what to do if you installed it.
Static Scan Results
scanned 1mo ago · by rust-scannerStatic analysis completed at 100.0% confidence. No malicious behavior was detected; 1 low-signal pattern(s) were surfaced and cleared.
Static reason
Verified npm security holding placeholder published by npm; no executable package surface is present.
Decision evidence
public snapshotBehavioral surface
Source & flagged code
0 flagged · loading sourceNo flagged code excerpts are attached to this scan.
Findings
1InfoNpm Security Holding Package
Affected versions and remediation
This report applies to tinkoff-boxy-atom-text-link@0.0.1-security.
See all versions of tinkoff-boxy-atom-text-link for other recorded verdicts.
- Review the evidence and your use of tinkoff-boxy-atom-text-link@0.0.1-security before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.