gezi-core (>=0.0.0 <=0.0.2) potentially affected by unknown CVE via unique-now (=0.0.1)

unique-now NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on unique-now and may be impacted: - gezi-core =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-37825...

MAL-2025-37825 Malicious code in unique-now (npm)

The package unique-now was found to contain malicious code...