Malicious code in latency-tracking (npm)

This threat involves a malicious package identified in the npm ecosystem under the name 'latency-tracking' at version 99.9.0. The package is flagged as containing malicious code, but no further technical details, exploitation methods, or impact specifics are provided. There is no vendor advisory or patch information available for this version.

The presence of malicious code in the specified package version could lead to compromise of systems that install and run this package. However, without detailed information on the nature of the malicious code or exploitation, the exact impact cannot be determined. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until more information is available, users should avoid using version 99.9.0 of the 'latency-tracking' package and monitor official sources for updates or patches.