Malicious code in new-chain (npm)

The package new-chain was found to contain malicious code...

alert (>=0.0.0 <=0.0.1), audio-play (=1.0.0) +13 more potentially affected by unknown CVE via new-chain (>=0.0.0 <=2.0.0)

new-chain NPM version =0.0.0, =0.0.0, =0.0.0, =1.0.1, =0.0.0, =0.0.9, =0.0.0, =3.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27356...

MAL-2025-27356 Malicious code in new-chain (npm)

The package new-chain was found to contain malicious code...