Malicious versions reported for this package
- MAL-2025-47027 — 1.17.3 · Sep 11, 2025
1 result · Feed
-
Critical 9.3
Prebid Universal Creative on npm briefly compromised
Prebid Universal Creative (PUC) is a JavaScript API to render multiple formats. Npm users of PUC 1.17.3 or PUC latest were briefly affected by crypto-related malware. This includes the extremely popular jsdelivr hosting of this file. The maintainers of PUC un…