Malicious versions reported for this package
- MAL-2025-27624 — all versions · Aug 14, 2025
1 result · Feed
-
Critical 9.8
Malicious Package in node-ftp
This package contained malicious code. The package uploaded system information such as OS and hostname to a remote server. ## Recommendation Remove the package from your environment. There are no indications of further compromise.