npm package
icu-messageformat
pkg:npm/icu-messageformat
Malware
2 malicious versions on record
One or more versions of this package have been flagged as containing malicious code. Audit any system that installed an affected version.
- GHSA-fcjq-f3w4-jmm4Malicious code in icu-messageformat (npm)Sep 13, 2026
- MAL-2025-49416Malicious code in icu-messageformat (npm)Nov 9, 2025
Vulnerabilities (0)
No CVEs are currently linked to this package.