MAL-2025-17804 Malicious code in csv-mineralogy-pm2-transform (npm)

The package csv-mineralogy-pm2-transform was found to contain malicious code...

MAL-2025-17801 Malicious code in csv-cosmicray-mui-spica (npm)

The package csv-cosmicray-mui-spica was found to contain malicious code...

MAL-2025-27331 Malicious code in neuromorphic-terser-csv-dagda (npm)

The package neuromorphic-terser-csv-dagda was found to contain malicious code...

Malicious code in norma-csv-impulse-gatsby (npm)

The package norma-csv-impulse-gatsby was found to contain malicious code...

Malicious code in terser-module-csv-promise (npm)

The package terser-module-csv-promise was found to contain malicious code...

MAL-2025-27722 Malicious code in norma-csv-impulse-gatsby (npm)

The package norma-csv-impulse-gatsby was found to contain malicious code...

MAL-2025-17803 Malicious code in csv-jekyll-equinox-pegasus (npm)

The package csv-jekyll-equinox-pegasus was found to contain malicious code...

MAL-2025-17802 Malicious code in csv-hermes-cryonics-solis (npm)

The package csv-hermes-cryonics-solis was found to contain malicious code...

Malicious code in public-csv-carpo-cygnus (npm)

The package public-csv-carpo-cygnus was found to contain malicious code...

Malicious code in csv-mineralogy-pm2-transform (npm)

The package csv-mineralogy-pm2-transform was found to contain malicious code...

Malicious code in csv-hermes-cryonics-solis (npm)

The package csv-hermes-cryonics-solis was found to contain malicious code...

Malicious code in yyf-csv (npm)

The package yyf-csv was found to contain malicious code...

Malicious code in neuromorphic-terser-csv-dagda (npm)

The package neuromorphic-terser-csv-dagda was found to contain malicious code...

Malicious code in csv-module-mocha-lyra (npm)

The package csv-module-mocha-lyra was found to contain malicious code...

Malicious code in csv-jekyll-equinox-pegasus (npm)

The package csv-jekyll-equinox-pegasus was found to contain malicious code...

Malicious code in dependencies-envconfig-csv-auriga (npm)

The package dependencies-envconfig-csv-auriga was found to contain malicious code...

MAL-2025-40690 Malicious code in yyf-csv (npm)

The package yyf-csv was found to contain malicious code...

MAL-2025-18286 Malicious code in dependencies-envconfig-csv-auriga (npm)

The package dependencies-envconfig-csv-auriga was found to contain malicious code...

CVE-2025-52386: Improper Neutralization of Formula Elements in a CSV File

CycloneDX Sunshine v0.9 is vulnerable to CSV Formula Injection via a crafted JSON file...

PT-2025-32992 · Unknown · Cyclonedx Sunshine

Name of the Vulnerable Software and Affected Versions: CycloneDX Sunshine version 0.9 Description: CycloneDX Sunshine version 0.9 is vulnerable to CSV Formula Injection via a crafted JSON file. Recommendations: At the moment, there is no information about a newer version that contains a fix for...