OpenSSF/OSV advisory MAL-2026-3330 confirms this npm version as malicious. The package seek-pass was found to contain malicious code.
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in seek-pass (npm)
Details
The package seek-pass was found to contain malicious code.
## Source: ossf-package-analysis (e1687eccaa8a2cfc6060797283701c63e515384f1285b269045fce17b11fff21) The OpenSSF Package Analysis project identified 'seek-pass' @ 100.3.0 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
Decision reason
One or more suspicious static signals were detected.