Malicious versions reported for this package
- MAL-2025-22218 — all versions · Aug 14, 2025
1 result · Feed
-
Critical 9.8
Malicious Package in harmlesspackage
Version 0.0.1 of `harmlesspackage` contains malicious code as a postinstall script. The package printed a message to the console and performed a GET request to a remote server. ## Recommendation Remove the package from your environment. There is no evidence o…