PkgRadar

Malware advisory

MAL-2026-6689

Malicious code in decimal-format-core (npm)

3 affected releases in the PkgRadar corpus · published 2026-06-30 · upstream advisory

Affected packages

PackageEcosystemVersionVerdictScanned (UTC)
decimal-format-corenpm0.0.1-securityHigh risk2026-07-13
decimal-format-corenpm3.5.5High risk2026-07-13
decimal-format-corenpm3.5.4High risk2026-07-13

PkgRadar blocks these releases at the CI gate before they reach your build. Start free or see all advisories.

MAL-2026-6689 — malicious package advisory | PkgRadar