npm package
huggingface-js
pkg:npm/huggingface-js
Malware
2 malicious versions on record
One or more versions of this package have been flagged as containing malicious code. Audit any system that installed an affected version.
- MAL-2026-222Malicious code in huggingface-js (npm)Jan 12, 2026
- GHSA-5fpx-j295-mggfMalware in huggingface-jsJan 12, 2026
Vulnerabilities (0)
No CVEs are currently linked to this package.