—
MAL-2025-6026
Malicious code in synckit (npm)
Details
This package installs a windows based malware file node-gyp.dll via install.js
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/synckit
No fixed version published yet for synckit (npm). Pin to a known-safe version or switch to an alternative.