VYPR

npm package

import-user-reject-decode-async

pkg:npm/import-user-reject-decode-async

Malware

2 malicious versions on record

One or more versions of this package have been flagged as containing malicious code. Audit any system that installed an affected version.

  • GHSA-6736-rjw5-g4x5Malicious code in import-user-reject-decode-async (npm)
    Sep 13, 2026
  • MAL-2025-23088Malicious code in import-user-reject-decode-async (npm)
    Aug 14, 2025

Vulnerabilities (0)

No CVEs are currently linked to this package.