Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-j12f-3gem-sfc2
Aliases:
GHSA-487x-8rm3-h5j5
MAL-2025-47133
|
Malicious code in @ctrl/magnet-link (npm)
This package was compromised by the Shai-Hulud NPM worm.
The malicious payload steals tokens and credentials and publishes
them to GitHub before propogating itself to NPM packages the user owns.
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (0)
| Vulnerability |
Summary |
Aliases |
|
This package is not known to fix vulnerabilities.
|