Protet Intel / npm / @webapp-shared/login-vmok

@webapp-shared/login-vmok 1.0.0

confirmed malicious PROTET-NPM-2026-125

Every version of this package that Protet Intel names: Is @webapp-shared/login-vmok malicious?

Records

Status history

  • 2026-10-27: named as a Protet finding
  • 2026-10-28: active

Want to know if your own builds pull packages like this? Add the Protet GitHub Action.

Think this is wrong? Write to hello@protet.io and we will look at it.