CVE-2025-69264

pnpm is a package manager. Versions 10.0.0 through 10.25 allow git-hosted dependencies to execute arbitrary code during pnpm install, circumventing the v10 security feature "Dependency lifecycle scripts execution disabled by default". While pnpm v10 blocks postinstall scripts via the...

CVE-2025-69264

creationtimestamp| type| source ---|---|--- 2026-01-07 00:38:31+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-379q-355j-w6rj 2026-01-07 23:09:29+00:00| seen| Telegram/FpDGAESLT2b6cAqL19jI0amMTjRd3R14Wu3P5pTmHCNxdqI 2026-01-07 23:11:17+00:00| seen|...

EUVD-2025-69264

Malicious code in lisa-menjes17-ruro npm...