malware npm
napi-postinstall
discovered 2025-07-21napi-postinstall is identified in the SafeDep analysis "eslint-config-prettier Compromised: How npm Package with 30 Million Downloads Spread Malware". A supply chain attack exploiting eslint-config-prettier and other popular npm packages were discovered with major supply chain impact. In this blog, we will explore the details of the hack and the impact it had on the npm ecosystem.
Threat types
other
Malicious versions
- 0.3.1
