https://advisories.gitlab.com/npm/@trefox/sleekshop-js/GMS-2025-296/
@trefox/sleekshop-js contains malware after npm account takeover | GitLab Advisory Database (GLAD)
GMS-2025-296 @trefox/sleekshop-js contains malware after npm account takeover: On November 24th 2025, a new supply chain attack called Shai-Hulud 2.0 was...