04-rsib_contact-numbers-menue_cli (>=1.0.0 <=1.0.1), advanture-game-by-sam (>=1.0.0 <=1.0.1) +2 more potentially affected by unknown CVE via chak (=0.0.1-security)

chak NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chak and may be impacted: - 04-rsibcontact-numbers-menuecli =1.0.0, =1.0.0, =1.0.1, =1.0.3 - text-base-adventure-92 =1.0.0 Source cves: unknown CVE Source advisory:...

MAL-2025-16763 Malicious code in chak (npm)

The package chak was found to contain malicious code...

Malicious code in chak (npm)

The package chak was found to contain malicious code...

Malicious Package in chak

All versions of chak typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

04-rsib_contact-numbers-menue_cli (>=1.0.0 <=1.0.1), advanture-game-by-sam (>=1.0.0 <=1.0.1) +2 more potentially affected by unknown CVE via chak (=0.0.1-security)

chak NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chak and may be impacted: - 04-rsibcontact-numbers-menuecli =1.0.0, =1.0.0, =1.0.1, =1.0.3 - text-base-adventure-92 =1.0.0 Source cves: unknown CVE Source advisory:...

GHSA-9Q9M-M2F6-JR5Q Malicious Package in chak

All versions of chak typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

Malicious Package

Overview All versions of chak typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...