Malware advisory
MAL-2025-4515
Malicious code in thira (npm)
2 affected releases in the PkgRadar corpus · published 2025-05-27 · upstream advisory
Affected packages
Every release listed here is malicious per this advisory and is blocked at the CI gate. The Static scancolumn is PkgRadar’s independent static-analysis result for that release — some malicious releases score low on static signals alone, which is why we also mirror the advisory as authoritative.