Malicious code in redux-starter (npm)

The package redux-starter was found to contain malicious code...

go-api-starter (>=0.0.0, <=1.3.0), redux-starter (>=0.0.0, <=1.1.0) potentially affected by unknown CVE via kik-starter (>=0.0.1, <=2.2.1)

kik-starter NPM version =0.0.1, =0.0.0, =0.0.0, =1.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-24454...

MAL-2025-31953 Malicious code in redux-starter (npm)

The package redux-starter was found to contain malicious code...