SafeDep
Install GitHub App
Start for Free
SafeDep
Install GitHub App
Start for Free

Summary

Note: This report is updated by a verification record

osv MAL-2025-6021: Malicious code in @pkgr/core (npm)

Verification Record

Package compromised via npm token leak from phishing attack

Details

Note: This report is updated by a verification record

@pkgr/core@0.2.8Malicious
Verified
Analysed at: 10/10/26, 8:50 PM
Source: -
SHA256:
Confidence: High