v0-utils (npm)

Known vulnerabilities and malicious package reports for v0-utils on npm, live from OSV, with CISA KEV exploitation status and EPSS scores.

Known package reports

1 malicious package report and 0 vulnerabilities returned by OSV. Check a specific version to see which reports apply.

If you installed a reported malicious release, remove it and rotate the credentials that machine could access. Upgrading does not undo code that already ran.

MAL-2025-48090: Malicious package report

Malicious code in v0-utils (npm)

Published 2025-10-08.

Updated 2025-10-27.

Reported affected releases: 999.999.999, 999.999.2004, 999.999.3004, 999.999.4004, 999.999.5004, 999.999.9004, 999.999.6004, 999.999.15004, 999.999.22004, 999.999.25004, 999.999.8004, 999.999.9704, 999.999.10004, 999.999.11004, 999.999.12004, 999.999.20004, 999.999.21004, 999.999.23004, 999.999.29004, 999.999.33004.

Affected ranges: introduced 0.

Source: OSV, including OpenSSF malicious-package reports and GitHub advisories. No known report is not proof a package is safe.