Malicious code in picnic-work-app-terms-of-use-fr (npm)

This entry reports a malicious package identified in the npm ecosystem under the name 'picnic-work-app-terms-of-use-fr' at version 9999.0.0. The data does not include detailed vulnerability or exploit technical details, CVSS scoring, or vendor remediation information. It is cataloged under a malicious package identifier (MAL-2026-7346) and linked to the advisory GHSA-82x3-52vq-69mr. No further specifics on the nature of the malicious code or its impact are provided.

The presence of malicious code in the specified npm package version implies potential risk to users who install or use this package, possibly leading to compromise of systems or data depending on the malicious payload. However, no explicit impact details or exploitation reports are available.

No patch or remediation information is provided. Users should avoid using the affected package version (=9999.0.0). Since no official fix or vendor advisory is available, the best mitigation is to remove or not install this package version and monitor for any updates from the package maintainers or security advisories.