npm package ambar-src flagged as malware — no patched version
GitHub's Advisory Database published a malware advisory for the npm package ambar-src, warning that any affected machine should be treated as fully compromised.
Supply ChainJavaScriptMalware
1 min16 Feb 2026