Note: This report is updated by a verification record
osv MAL-2025-6022: Malicious code in eslint-config-prettier (npm)
Package compromised via npm token leak from phishing attack