delegate-dom (>=0.0.0 <=0.0.1), dom-delegation-stream (=0.0.0) +2 more potentially affected by unknown CVE via matches-dom-selector (=0.0.0)

matches-dom-selector NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on matches-dom-selector and may be impacted: - delegate-dom =0.0.0, =1.0.0, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25996...

Malicious code in matches-dom-selector (npm)

The package matches-dom-selector was found to contain malicious code...

MAL-2025-25996 Malicious code in matches-dom-selector (npm)

The package matches-dom-selector was found to contain malicious code...