npm package report

Is @aws-sdk/middleware-user-agent safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/aws-sdk__middleware-user-agent

npm packagelast checked 2026-09-19

@aws-sdk/middleware-user-agent · verdict ALERT · review advised

4.0/10

XYZ SCORE

SUMMARY

Verdict ALERT · 0 graph-tracked dependencies · provenance: none found

Re-check live →

SIGNALS

Commit-Level AnalysistriggeredHIGH

{"is_malicious": true, "confidence": 0.85, "attack_pattern": "staged_injection", "categories": ["exfiltration", "obfuscation"], "commits_involved": 3, "reasoning": "Multiple individually low-severity signals across 3 commits combine into a staged_injection pattern. This matches k

PACKAGE @aws-sdk/middleware-user-agentECOSYSTEM npmDECISION ALERT

Package facts

Weekly downloads

132M

GitHub stars

3.5k

Centrality tier

tier 1

Build provenance

none found

Direct dependencies

History on this package: popular package (362 versions over 122d) with pattern-only evidence — de-escalated for review rather than blocked

Baked snapshot · run a live check for the current verdict · browse all packages

Other package reports

aws-sdk__nested-clients aws-sdk__node-config-provider aws-sdk__node-http-handler aws-sdk__middleware-stack aws-sdk__middleware-ssec aws-sdk__middleware-signing

See all package reports or check any package live.