CRITICAL npm Malware

Malicious code in kiota-typescript (npm)

MAL-2025-68

Published · Modified

Description

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain.


__

Ready to move

Start Securing

Free, no credit card | First findings in minutes