Malicious Package

Overview node-winston-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-45336 Malicious code in node-winston-logger (npm)

The package node-winston-logger was found to contain malicious code...

Malicious code in node-winston-logger (npm)

The package node-winston-logger was found to contain malicious code...