MAL-2025-33167 Malicious code in shrugging-logging (npm)

The package shrugging-logging was found to contain malicious code...

Malicious code in shrugging-logging (npm)

The package shrugging-logging was found to contain malicious code...

Malicious Package

Overview All versions of shrugging-logging contain malicious code as a postinstall script. The package fetches all names of npm packages owned by the user and attempts to add another maintainer to every package as a means of package hijacking, Recommendation Remove the package from your system. I...