npm package
josecarvalho
pkg:npm/josecarvalho
Malware
2 malicious versions on record
One or more versions of this package have been flagged as containing malicious code. Audit any system that installed an affected version.
- GHSA-4h6h-ph4m-hgv8Malicious code in josecarvalho (npm)Sep 17, 2026
- MAL-2025-171420Malicious code in josecarvalho (npm)Nov 12, 2025
Vulnerabilities (0)
No CVEs are currently linked to this package.