npm package report
Is test-renderer safe?
Version 28.0.0 of test-renderer was compromised. Other versions are not flagged as malicious.
Do not install test-renderer 28.0.0
CRITICALCompromised releases. Added to CyberXYZ 2024-06-25, OSV malicious-package feed (Google / OpenSSF).
// what we observed
The publishing source recorded this as malicious without a public write-up.
// versions and what to do
- Malicious
- 28.0.0
- Move to
- 1.3.1 current release, no known advisory
If one of these versions was installed, remove it and treat the credentials, tokens and SSH keys on that machine as exposed: rotate them. Check CI runners and container images that installed it too.
npm install test-renderer@1.3.1
// reach
2 direct dependencies
none carry a known advisory
Create a free accountfor every dependency path, dependent and what to upgrade
// ai model usage
Tracked for PyPI packages. HuggingFace models declare Python dependencies, so npm packages are not covered.
Checked 2026-10-31 at 00:00 UTC. Updated continuously from NVD, GHSA, OSV and CNA feeds.