Malicious
OSV ID
MAL-2025-6020
Ecosystem
npm
Summary
"is" had unauthorized new versions published that contained malicious obfuscated code via account compromise.
Source: google-open-source-security (a1baf574e6278b3c20c30fdd7875414ed04c1a695eb226fd43328004c6916873)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.