bud-live-server (>=0.0.0 <=0.0.5), just-a-browserify-server (>=0.0.0 <=1.0.0) potentially affected by unknown CVE via just-a-server (>=0.0.0 <=0.0.1)

just-a-server NPM version =0.0.0, =0.0.0, =0.0.0, =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-24109...

Malicious code in just-a-server (npm)

The package just-a-server was found to contain malicious code...

MAL-2025-24109 Malicious code in just-a-server (npm)

The package just-a-server was found to contain malicious code...