@naologic/design (>=1.0.5, <=1.1.4) potentially affected by unknown CVE via iodash (0.0.1-security)

iodash NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on iodash and may be impacted: - @naologic/design =1.0.5, =1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23307...

Malicious code in iodash (npm)

The package iodash was found to contain malicious code...

MAL-2025-23307 Malicious code in iodash (npm)

The package iodash was found to contain malicious code...