mms-thin-client 1.0.0
Security hold placeholder
“security holding package”
Release declares an entry point it omitsDefault npm-init placeholder test script
SHA-256dd1c6af19d0933db467bf9767426967c530d84855c2ed8082ad6d66c2ee7f5c5
MaleculeO(S₂)Md(Pa₆)
Also flagged by osv (MAL-2025-49231: Malicious code in mms-thin-client (npm)) +3 more.