Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component ...
The vulnerability, tracked as CVE-2025-11953, carries a CVSS score of 9.8 out of a maximum of 10.0, indicating critical severity. It also affects the "@react-native-community/cli-server-api" package ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback