CVE-2025-59143 — color is a Javascript color conversion and manipulation library. On 8 September 2025, the npm publishing account for color was taken over after a phishing attack. Version 5.0.1 was published, function — CVE Database · The Intelligence Room