Note: This report is updated by a verification record
osv MAL-2026-2223: Malicious code in cr-static-shared-components (npm)
The package is marked as malware by OSV: MAL-2026-2223 with source: ghsa-malware
Note: This report is updated by a verification record