new-ecro-helper 5.8.0
Impersonation of the popular big.js libraryImport-time from_str loader swallows results
SHA-256c818be265dc17c5a5a3fa77830fe0d05a68f42acd503d66f67e3b4f990318eb9
MaleculeO(S₄)H₂(CmOs)Md(Pa₄)
Also flagged by osv (MAL-2026-6283: Malicious code in new-ecro-helper (npm)) +2 more.