HIGH Slopsquatting risk: high
VDB-SLOP-npm-2bd38d715c
Slopsquatting candidate: npm-sha2 (npm)
Details
LLMs recommended `npm-sha2` in the npm ecosystem for tasks where the package is nonexistent. Verify before installing.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm / npm-sha2
Introduced in:
0 No fixed version published yet for npm-sha2 (npm). Pin to a known-safe version or switch to an alternative.