Is @nebula.js/stardust malicious? — npm — SafeDep - Real-time Open Source Software Supply Chain Security

New Blog: eMudhra CA Key Compromise: Response Guide for Developers

22 Oct 2026

APIThreat Intel Feed API · Confirmed malicious packages, campaigns and IOCs, piped into your stackExplore the API

Is @nebula.js/stardust malicious? — npm — SafeDep - Real-time Open Source Software Supply Chain Security