@dm3-org/dm3-cli (=1.3.0) potentially affected by unknown CVE via ccip-resolver (=0.2.10)

ccip-resolver NPM version =0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on ccip-resolver and may be impacted: - @dm3-org/dm3-cli =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-5026...

MAL-2025-5026 Malicious code in ccip-resolver (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in ccip-resolver (npm)

The package communicates with a domain associated with malicious activity...