Check this vendor claim before you install

github.com published this account (2026-10-25): GitHub published 2 malware advisories between 2026-10-25T15:31:36Z and 2026-10-25T15:31:36Z for npm: @greenlake/session 99.0.1; @greenlake/common-context 99.0.1. Per the GitHub advisories (source: amazon-inspector), these are version-99.0.1 scoped shims exporting a no-op Proxy whose only real behavior is a beacon that reports host information. No known-good version named. CVE pending (none assigned). Exploitation: NOT STATED. Primary source: OPENED_AND_SUPPORTS / Event time: 2026-10-25T15:31:36Z / Security record: GHSA-ph7p-r8mj-5q6r, GHSA-p5fc-j294-qr5q / Fixed release: none yet / Discovery confidence: High

This guide uses that public page as the example. This site did not run the test, close the deal, or measure the product.

Write only what the page says

The page's claim is: GitHub published 2 malware advisories between 2026-10-25T15:31:36Z and 2026-10-25T15:31:36Z for npm: @greenlake/session 99.0.1; @greenlake/common-context 99.0.1. Per the GitHub advisories (source: amazon-inspector), these are version-99.0.1 scoped shims exporting a no-op Proxy whose only real behavior is a beacon that reports host information. No known-good version named. CVE pending (none assigned). Exploitation: NOT STATED. Primary source: OPENED_AND_SUPPORTS / Event time: 2026-10-25T15:31:36Z / Security record: GHSA-ph7p-r8mj-5q6r, GHSA-p5fc-j294-qr5q / Fixed release: none yet / Discovery confidence: High

Put the URL under that sentence. If a later recap adds a number or a date, keep the original page as the record.

Quote the claim, name one install, and write the questions the page leaves open.

Do the site's check on this one page. Fill a line only when the page supports it. Where the page is silent, write Not stated.

A finished note names the page, the date, and the limit of the claim. It does not borrow a result from a different story.

Stop at the untested line

Anything you did not open, install, or count stays untested. Leave that line visible.

Source page: Malicious npm packages in the @greenlake scope (99.0.1) (GitHub malware advisories GHSA-ph7p-r8mj-5q6r, GHSA-p5fc-j294-qr5q).

Source: Malicious npm packages in the @greenlake scope (99.0.1) (GitHub malware advisories GHSA-ph7p-r8mj-5q6r, GHSA-p5fc-j294-qr5q).