Malicious
OSV ID
MAL-2025-47026
Ecosystem
npm
Summary
This package was compromised and malicious code added as part of a phishing campaign.
Source: google-open-source-security (14e7380eb0ee7e6be1b7896f1a961c6f7282199fcce42017c4003fc73695ee52)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.