GHSA-8r2f-2qg4-cv9v / MAL-2026-5077 was published a short time ago indicating pkg:npm/puppeteer@25.0.1 is malicious.
GHSA-rvxm-vq55-8p53](GHSA-rvxm-vq55-8p53) / MAL-2026-3655
previously flagged versions for the same release of related packages as malware, and was previously contested as a false positive in #7684
This new GHSA should similarly be withdrawn, or evidence otherwise provided of the version being malware.
GHSA-8r2f-2qg4-cv9v / MAL-2026-5077 was published a short time ago indicating
pkg:npm/puppeteer@25.0.1is malicious.GHSA-rvxm-vq55-8p53](GHSA-rvxm-vq55-8p53) / MAL-2026-3655
previously flagged versions for the same release of related packages as malware, and was previously contested as a false positive in #7684
This new GHSA should similarly be withdrawn, or evidence otherwise provided of the version being malware.