—
MAL-2025-6025
Malicious code in napi-postinstall (npm)
Details
This package installs a windows based malware file node-gyp.dll via install.js
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/napi-postinstall
No fixed version published yet for napi-postinstall (npm). Pin to a known-safe version or switch to an alternative.