This package was published as part of authorized security research (dependency confusion vulnerability disclosure).
If you are a developer at Reclame Aqui / Obvi Brasil and received this via your CI pipeline, please contact your security team immediately.
FAQs
security holding package
The npm package fnd-stores receives a total of 75 weekly downloads. As such, fnd-stores popularity was classified as not popular.
We found that fnd-stores demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.
Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.
Threat Research
/Security News
Cursor removed a malicious Claude Code 2.1.313 extension from its marketplace. Socket examines registry records and the initial claims about its distribution.
