Malicious code in picnic-store-design-system (npm)

The package 'picnic-store-design-system' in the npm ecosystem at version 9999.0.0 has been identified as containing malicious code. This is cataloged under the identifier MAL-2026-7343 and GHSA-5chj-qm4h-7c4q. There is no detailed technical description or CVSS score available, and no known exploits in the wild have been reported. The threat is classified as a malicious package rather than a software vulnerability.

The presence of malicious code in the package can lead to compromise of systems that install or use this specific version of the package. The exact impact depends on the nature of the malicious code, which is not detailed in the provided information. No known active exploitation has been reported.

No patch or remediation details are provided. Users should avoid using the affected version (=9999.0.0) of the 'picnic-store-design-system' package. It is recommended to verify package integrity and source before installation. Monitor vendor or repository advisories for updates or removal of the malicious package.