https://advisories.gitlab.com/npm/@thangved/callback-window/MAL-2025-47281/
Malicious code in @thangved/callback-window (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47281 Malicious code in @thangved/callback-window (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens...
malicious codecallback