Malicious versions reported for this package
- MAL-2025-27842 — all versions · Aug 14, 2025
1 result · Feed
-
Critical 9.8
npm-script-demo is malware
The module npm-script-demo opened a connection to a command and control server. It has been removed from the npm registry.