jl-wechat-sdk (>=1.0.0 <=1.2.3) potentially affected by unknown CVE via crpyto-js (=0.0.1-security)

crpyto-js NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crpyto-js and may be impacted: - jl-wechat-sdk =1.0.0, =1.2.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17718...

Malicious code in crpyto-js (npm)

The package crpyto-js was found to contain malicious code...

MAL-2025-17718 Malicious code in crpyto-js (npm)

The package crpyto-js was found to contain malicious code...