npm package
hugo-cosmiconfig-hugo-canopus
pkg:npm/hugo-cosmiconfig-hugo-canopus
Malware
2 malicious versions on record
One or more versions of this package have been flagged as containing malicious code. Audit any system that installed an affected version.
- GHSA-3gxf-x2v4-897rMalicious code in hugo-cosmiconfig-hugo-canopus (npm)Sep 13, 2026
- MAL-2025-143384Malicious code in hugo-cosmiconfig-hugo-canopus (npm)Nov 12, 2025
Vulnerabilities (0)
No CVEs are currently linked to this package.