npm · Malicious package advisory
Malwareasync-changelog-semantic-release-higgs
MAL-2025-14986
Malicious code in async-changelog-semantic-release-higgs (npm)
Details
The package async-changelog-semantic-release-higgs was found to contain malicious code.