Malicious code in glaciology-query-fetch-exec (npm)

The package glaciology-query-fetch-exec was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ts-vitest (npm)

ts-vitest is a typosquat of vitest/ts-eslint hollow "kelly-calc"/"clob-math" content, no legitimate functionality that ships a postinstall two-stage fetch-exec dropper. The package.json declares postinstall: node scripts/install-check.cjs; the hook's resolvePeerBundleUrl fetches a JSON config fro...

MAL-2025-21542 Malicious code in glaciology-query-fetch-exec (npm)

The package glaciology-query-fetch-exec was found to contain malicious code...

Malicious code in glaciology-query-fetch-exec (npm)

The package glaciology-query-fetch-exec was found to contain malicious code...