npm package report
Is @aws-sdk/types safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
@aws-sdk/types · verdict ALERT · review advised
4.0/10
XYZ SCORE
Commit-Level AnalysistriggeredHIGH
{"is_malicious": true, "confidence": 0.85, "attack_pattern": "staged_injection", "categories": ["exfiltration", "obfuscation"], "commits_involved": 3, "reasoning": "Multiple individually low-severity signals across 3 commits combine into a staged_injection pattern. This matches k
concurrently@7.0.0clean
downlevel-dts@0.10.1clean
premove@4.0.0clean
@smithy/types@^4.16.1clean
@tsconfig/recommended@1.0.1clean
tslib@^2.6.2clean
typescript@~5.8.3clean
PACKAGE @aws-sdk/typesECOSYSTEM npmDECISION ALERT
Package facts
Weekly downloads
239.9M
GitHub stars
3.5k
Centrality tier
tier 1
Build provenance
none found
Direct dependencies
7
History on this package: popular package (197 versions over 95d) with pattern-only evidence — de-escalated for review rather than blocked
Baked snapshot · run a live check for the current verdict · browse all packages