MAL-2025-14405 Malicious code in altair-prettier-node-config-prosthetics (npm)

The package altair-prettier-node-config-prosthetics was found to contain malicious code...

MAL-2025-24889 Malicious code in lacerta-eris-altair-terser-webpack-plugin (npm)

The package lacerta-eris-altair-terser-webpack-plugin was found to contain malicious code...

Malicious code in altair-prettier-stylelint-mdx-aurora (npm)

The package altair-prettier-stylelint-mdx-aurora was found to contain malicious code...

Malicious code in altair-prettier-node-config-prosthetics (npm)

The package altair-prettier-node-config-prosthetics was found to contain malicious code...

Malicious code in chromedriver-websockets-altair-superagent (npm)

The package chromedriver-websockets-altair-superagent was found to contain malicious code...

Malicious code in stop-neutrino-altair-astrobiology (npm)

The package stop-neutrino-altair-astrobiology was found to contain malicious code...

Malicious code in solis-sagitta-bootstrap-altair (npm)

The package solis-sagitta-bootstrap-altair was found to contain malicious code...

Malicious code in fornax-algol-altair-cosmochemistry (npm)

The package fornax-algol-altair-cosmochemistry was found to contain malicious code...

Malicious code in wezen-altair-antares-xanadu (npm)

The package wezen-altair-antares-xanadu was found to contain malicious code...

MAL-2025-39094 Malicious code in wezen-altair-antares-xanadu (npm)

The package wezen-altair-antares-xanadu was found to contain malicious code...

MAL-2025-20792 Malicious code in fornax-algol-altair-cosmochemistry (npm)

The package fornax-algol-altair-cosmochemistry was found to contain malicious code...

MAL-2025-29082 Malicious code in perturbation-altair-sedna-eridanus (npm)

The package perturbation-altair-sedna-eridanus was found to contain malicious code...

MAL-2025-33995 Malicious code in stop-neutrino-altair-astrobiology (npm)

The package stop-neutrino-altair-astrobiology was found to contain malicious code...

Malicious code in mongodb-accretion-altair-geodynamo (npm)

The package mongodb-accretion-altair-geodynamo was found to contain malicious code...

MAL-2025-32720 Malicious code in saturnology-meissa-apollo-altair (npm)

The package saturnology-meissa-apollo-altair was found to contain malicious code...

MAL-2025-14407 Malicious code in altair-publish-semantic-ui-prompts (npm)

The package altair-publish-semantic-ui-prompts was found to contain malicious code...

MAL-2025-18726 Malicious code in draco-altair-sirius-jest (npm)

The package draco-altair-sirius-jest was found to contain malicious code...

MAL-2025-17003 Malicious code in chromedriver-websockets-altair-superagent (npm)

The package chromedriver-websockets-altair-superagent was found to contain malicious code...

CVE-2024-54147

Altair is a GraphQL client for all platforms. Prior to version 8.0.5, Altair GraphQL Client's desktop app does not validate HTTPS certificates allowing a man-in-the-middle to intercept all requests. Any Altair users on untrusted networks eg. public wifi, malicious DNS servers may have all GraphQL...

CVE-2023-43799

Altair is a GraphQL Client. Prior to version 5.2.5, the Altair GraphQL Client Desktop Application does not sanitize external URLs before passing them to the underlying system. Moreover, Altair GraphQL Client also does not isolate the context of the renderer process. This affects versions of the...