Malware advisory
MAL-2025-29251
Malicious code in pika (npm)
3 affected releases in the PkgRadar corpus · published 2025-08-14 · upstream advisory
Affected packages
Every release listed here is malicious per this advisory and is blocked at the CI gate. The Static scancolumn is PkgRadar’s independent static-analysis result for that release — some malicious releases score low on static signals alone, which is why we also mirror the advisory as authoritative.