https://advisories.gitlab.com/npm/hopedraw/GMS-2025-475/
hopedraw contains malware after npm account takeover | GitLab Advisory Database (GLAD)
GMS-2025-475 hopedraw contains malware after npm account takeover: On November 24th 2025, a new supply chain attack called Shai-Hulud 2.0 was launched. This...
account takeovercontainsmalwarenpm