Malicious versions reported for this package
- MAL-2025-25807 — all versions · Aug 14, 2025
1 result · Feed
-
Critical 9.8
Malicious Package in malicious-npm-package
All versions of `malicious-npm-package` contain malicious code. The malware targets Windows systems. It runs a powershell command that downloads an executable file from a remote server and runs it. ## Recommendation Any computer that has this package installe…