Malicious versions reported for this package
- MAL-2025-16429 — all versions · Aug 14, 2025
1 result · Feed
-
Critical 9.8
Malicious Package in cage-js
All versions of `cage-js` contains malicious code. The malware downloads and runs a script from a remote server as a postinstall script. ## Recommendation Any computer that has this package installed or running should be considered fully compromised. All secr…