npm package report

Is @aws-sdk/util-endpoints safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/aws-sdk__util-endpoints

npm packagelast checked 2026-09-19

@aws-sdk/util-endpoints · verdict ALERT · review advised

4.0/10

XYZ SCORE

SUMMARY

Verdict ALERT · 0 graph-tracked dependencies · provenance: none found

Re-check live →

SIGNALS

Commit-Level AnalysistriggeredHIGH

{"is_malicious": true, "confidence": 0.85, "attack_pattern": "staged_injection", "categories": ["exfiltration", "obfuscation"], "commits_involved": 3, "reasoning": "Multiple individually low-severity signals across 3 commits combine into a staged_injection pattern. This matches k

PACKAGE @aws-sdk/util-endpointsECOSYSTEM npmDECISION ALERT

Package facts

Weekly downloads

123.9M

GitHub stars

3.5k

Centrality tier

tier 1

Build provenance

none found

Direct dependencies

History on this package: phantom release on a package that normally tags

Baked snapshot · run a live check for the current verdict · browse all packages

Other package reports

aws-sdk__util-format-url aws-sdk__util-retry aws-sdk__util-user-agent-browser aws-sdk__util-dynamodb aws-sdk__util-defaults-mode-node aws-sdk__util-defaults-mode-browser

See all package reports or check any package live.