npm - OSV

MAL-2025-6026

npm/synckit

Malicious code in synckit (npm) 21 Jul 2025

No fix available

GHSA-f29h-pxvx-f335

npm/@pkgr/core
npm/eslint-config-prettier
npm/eslint-plugin-prettier
npm/got-fetch
npm/napi-postinstall
... 1 more

eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code 19 Jul 2025

Fix available
Severity - 7.5 (High)