PkgRadar

Malware advisory

MAL-2026-4625

Malicious code in oh-langfuse (npm)

15 affected releases in the PkgRadar corpus · published 2026-05-21 · upstream advisory

Affected packages

PackageEcosystemVersionVerdictScanned (UTC)
oh-langfusenpm0.1.48High risk2026-07-14
oh-langfusenpm0.1.28High risk2026-07-14
oh-langfusenpm0.1.52High risk2026-07-14
oh-langfusenpm0.1.49High risk2026-07-14
oh-langfusenpm0.1.38High risk2026-07-14
oh-langfusenpm0.1.53High risk2026-07-14
oh-langfusenpm0.1.43High risk2026-07-14
oh-langfusenpm0.1.31High risk2026-07-14
oh-langfusenpm0.1.51High risk2026-07-14
oh-langfusenpm0.1.45High risk2026-07-14
oh-langfusenpm0.1.29High risk2026-07-14
oh-langfusenpm0.1.46High risk2026-07-14
oh-langfusenpm0.1.42High risk2026-07-14
oh-langfusenpm0.1.44High risk2026-07-14
oh-langfusenpm0.1.56High risk2026-07-14

PkgRadar blocks these releases at the CI gate before they reach your build. Start free or see all advisories.

MAL-2026-4625 — malicious package advisory | PkgRadar