npm · Malicious package advisory
Malwareused-first-in-postinstall-script-dotslashed
MAL-2025-37964
Malicious code in used-first-in-postinstall-script-dotslashed (npm)
Details
The package used-first-in-postinstall-script-dotslashed was found to contain malicious code.