VYPR

npm package

http-message-signatures-extension

pkg:npm/http-message-signatures-extension

Malware

2 malicious versions on record

One or more versions of this package have been flagged as containing malicious code. Audit any system that installed an affected version.

  • GHSA-7mv9-2jj5-gmg6Malicious code in http-message-signatures-extension (npm)
    Sep 13, 2026
  • MAL-2025-48843Malicious code in http-message-signatures-extension (npm)
    Oct 23, 2025

Vulnerabilities (0)

No CVEs are currently linked to this package.