New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
Get Started

github-archiver

Package Overview
Dependencies
Maintainers
0
Versions
27
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install
This package has malicious versions linked to the ongoing "Miasma Mini Shai-Hulud Supply Chain Attack" supply chain attack.

Affected versions:

1.5.41.5.51.5.6
View campaign page

github-archiver

security holding package

latest
npmnpm
Version
0.0.1-security
Version published
Weekly downloads
0
Maintainers
0
Weekly downloads
 
Created
Source

Security holding package

This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.

Please refer to www.npmjs.com/advisories?search=github-archiver for more information.

FAQs

Package last updated on 09 Jun 2026

Related posts