—
MAL-2025-6024
Malicious code in got-fetch (npm)
Details
This package installs a windows based malware file node-gyp.dll via install.js
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/got-fetch
No fixed version published yet for got-fetch (npm). Pin to a known-safe version or switch to an alternative.