MAL-2025-28866 Malicious code in parallelly (npm)

The package parallelly was found to contain malicious code...

gezi-core (>=0.0.0, <=0.0.2), kik-starter (>=2.1.0, <=2.2.0) potentially affected by unknown CVE via parallelly (>=0.0.1, <=0.1.0)

parallelly NPM version =0.0.1, =0.0.0, =2.1.0, =2.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28866...

Malicious code in parallelly (npm)

The package parallelly was found to contain malicious code...