GHSA-353r-3v84-9pjjCriticalCVSS 9.8Disclosed before NVD
Malicious Package in nothing-js
📋 Description
nothing-js contained a malicious script that attempted to delete all files when npm test was run.
Recommendation
This module has been unpublished from the npm Registry. If you find this module in your environment remove it.
🎯 Affected products1
- npm/nothing-js:>= 0