MSC-2025-6825

Date: July 21, 2025

This package version was compromised through a phishing campaign to include a malware. It contains an install script that executes a bundled DLL file via rundll32 on Windows systems, allowing arbitrary code execution. The script also manipulates files and directories, including deleting, archiving, and logging activities, none of which are legitimate for a configuration package. Please update to the latest safe version 5.1.10 Read more details here: https://www.bleepingcomputer.com/news/security/popular-npm-linter-packages-hijacked-via-phishing-to-drop-malware/

Language: JS