CyberSecurityBoardThreat Intel · CVEs · Products
Cyber Products

core-js npm Package

July 30, 2026

core-js is a legitimate npm package for polyfilling JavaScript features. The malicious core.js file in typo-crypto was named to impersonate it.