Skip to main content
VulnerabilityPublished Updated

@alaska-its/design-tokens (npm) · Malicious Code

Affects @alaska-its/design-tokensSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 8 Sep 2026, 03:53 UTC

What to do

Affected software

ProductAffectedFixed in
npm@alaska-its/design-tokenspkg:npm/%40alaska-its/design-tokensOther threatsAffected
  • =1.0.1
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid using version 1.0.1 of @alaska-its/design-tokens. It is recommended to check the npm registry or vendor advisories for updates or safer alternatives. Until a fix or official guidance is available, do not install or use this version.

Description

The npm package @alaska-its/design-tokens version 1.0.1 contains malicious code. This is identified as a malicious package threat without a CVSS score or detailed technical exploit information. There are no known exploits in the wild reported at this time.

References

Community reviews

Loading reviews…