Malicious code in less-common-words (npm)

The package less-common-words was found to contain malicious code...

gezi-core (>=0.0.0 <=0.0.2), less-common-words (=0.0.0) +1 more potentially affected by unknown CVE via most-common-words (=2.0.0)

most-common-words NPM version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on most-common-words and may be impacted: - gezi-core =0.0.0, =0.0.2 - less-common-words =0.0.0 - meta-tags =0.0.0 Source cves: unknown CVE Source advisory:...

MAL-2025-25174 Malicious code in less-common-words (npm)

The package less-common-words was found to contain malicious code...

gezi-core (>=0.0.0 <=0.0.2), meta-tags (=0.0.0) potentially affected by unknown CVE via less-common-words (=0.0.0)

less-common-words NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on less-common-words and may be impacted: - gezi-core =0.0.0, =0.0.2 - meta-tags =0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25174...