Malicious code in my-skibidi (npm)

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

MAL-2026-17217

GHSA-w4g6-rgx4-2wjf

osv · MAL-2026-17217

• https://github.com/advisories/GHSA-w4g6-rgx4-2wjf
• https://www.npmjs.com/package/my-skibidi/v/1.0.2
• https://www.npmjs.com/package/my-skibidi/v/1.0.0
• https://www.npmjs.com/package/my-skibidi/v/1.0.3
• https://www.npmjs.com/package/my-skibidi/v/1.1.5
• https://www.npmjs.com/package/my-skibidi/v/1.1.2
• https://www.npmjs.com/package/my-skibidi/v/1.1.6
• https://www.npmjs.com/package/my-skibidi/v/1.1.1
• https://www.npmjs.com/package/my-skibidi/v/1.1.4
• https://www.npmjs.com/package/my-skibidi/v/1.1.3

No related operational record is retained in the current change model.