Malicious versions reported for this package
- MAL-2025-36693 — all versions · Aug 14, 2025
1 result · Feed
-
Critical 9.8
Malicious Package in test-module-a
All versions of `test-module-a` contain malicious code as a preinstall script. The package fetches all names of npm packages owned by the user and attempts to add another maintainer to every package as a means of package hijacking, ## Recommendation Remove th…