mod-manager 1.0.0
Security hold placeholder
“security holding package”
Release declares an entry point it omitsDefault npm-init placeholder test script
SHA-256998473cedfa30756605349eaaba2815f1d7ef8cf82771c7a84f4f0de256a45ec
MaleculeO(S₂)Md(Pa₆)
Also flagged by osv (MAL-2025-49233: Malicious code in mod-manager (npm)) +3 more.