—
MAL-2025-6021
Malicious code in @pkgr/core (npm)
Details
This package installs a windows based malware file node-gyp.dll via install.js
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/@pkgr/core
No fixed version published yet for @pkgr/core (npm). Pin to a known-safe version or switch to an alternative.