Malicious code in picnic-decoder-generator (npm)

The 'picnic-decoder-generator' package on npm, specifically version 9999.0.0, has been identified as containing malicious code. There is no detailed technical description or exploitation data provided. No official patch or remediation guidance is available, and no known exploits are reported in the wild.

The presence of malicious code in the package implies potential compromise of systems that install or use this version. However, specific impacts or attack vectors are not detailed in the available data.

Patch status is not yet confirmed — check the vendor advisory or npm security advisories for current remediation guidance. Until then, avoid using the affected version and consider using alternative packages or verified versions.