Malicious versions reported for this package
- MAL-2025-46990 — 10.9.2 · Sep 9, 2025
1 result · Clear filters · Feed
-
High 8.6
Prebid.js NPM package briefly compromised
Prebid.js is a free and open source library for publishers to quickly implement header bidding. NPM users of prebid 10.9.2 may have been briefly compromised by a malware campaign. The malicious code attempts to redirect crypto transactions on the site to the …