PkgRadar

Malware advisory

MAL-2025-17667

Malicious code in create-y (npm)

2 affected releases in the PkgRadar corpus · published 2025-08-14 · upstream advisory

Affected packages

PackageEcosystemVersionVerdictScanned (UTC)
create-ynpm1.0.0High risk2026-08-19
create-ynpm0.0.1-securityHigh risk2026-08-19

PkgRadar blocks these releases at the CI gate before they reach your build. Start free or see all advisories.

Malicious code in create-y (npm) — malware advisory MAL-2025-17667 | PkgRadar