https://advisories.gitlab.com/npm/@sameepsi/sor2/GMS-2025-267/
@sameepsi/sor2 contains malware after npm account takeover | GitLab Advisory Database (GLAD)
GMS-2025-267 @sameepsi/sor2 contains malware after npm account takeover: On November 24th 2025, a new supply chain attack called Shai-Hulud 2.0 was launched....