Malicious versions reported for this package
- MAL-2025-27735 — all versions · Aug 14, 2025
1 result · Feed
-
Critical 9.8
Malicious Package in nothing-js
`nothing-js` contained a malicious script that attempted to delete all files when `npm test` was run. ## Recommendation This module has been unpublished from the npm Registry. If you find this module in your environment remove it.