srb2kartjs (>=2.2.7, <=2.2.9) potentially affected by unknown CVE via ldoash (0.0.1-security)

ldoash NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ldoash and may be impacted: - srb2kartjs =2.2.7, =2.2.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25007...

Malicious code in ldoash (npm)

The package ldoash was found to contain malicious code...

MAL-2025-25007 Malicious code in ldoash (npm)

The package ldoash was found to contain malicious code...