npm package
todo-plz
pkg:npm/todo-plz
Malware
2 malicious versions on record
One or more versions of this package have been flagged as containing malicious code. Audit any system that installed an affected version.
- GHSA-q93m-663h-q987Malware in todo-plzMar 18, 2026
- MAL-2026-1533Malicious code in todo-plz (npm)Mar 16, 2026
Vulnerabilities (0)
No CVEs are currently linked to this package.