MAL-2025-17530 Malicious code in convict-indus-loopback-ariel (npm)

The package convict-indus-loopback-ariel was found to contain malicious code...

Malicious code in convict-borealis-socketio-kardashevscale (npm)

The package convict-borealis-socketio-kardashevscale was found to contain malicious code...

Malicious code in mocha-sedna-server-convict (npm)

The package mocha-sedna-server-convict was found to contain malicious code...

MAL-2025-17529 Malicious code in convict-centaurus-cosmology-odin (npm)

The package convict-centaurus-cosmology-odin was found to contain malicious code...

MAL-2025-26578 Malicious code in mocha-sedna-server-convict (npm)

The package mocha-sedna-server-convict was found to contain malicious code...

MAL-2025-15822 Malicious code in blitz-stream-convict-webdriverio (npm)

The package blitz-stream-convict-webdriverio was found to contain malicious code...

MAL-2025-17593 Malicious code in cors-convict-xml-paleoclimatology (npm)

The package cors-convict-xml-paleoclimatology was found to contain malicious code...

MAL-2025-17528 Malicious code in convict-borealis-socketio-kardashevscale (npm)

The package convict-borealis-socketio-kardashevscale was found to contain malicious code...

Malicious code in cors-convict-xml-paleoclimatology (npm)

The package cors-convict-xml-paleoclimatology was found to contain malicious code...

Malicious code in convict-indus-loopback-ariel (npm)

The package convict-indus-loopback-ariel was found to contain malicious code...

Malicious code in convict-centaurus-cosmology-odin (npm)

The package convict-centaurus-cosmology-odin was found to contain malicious code...

Malicious code in jwt-convict-dependencies-resolvers (npm)

The package jwt-convict-dependencies-resolvers was found to contain malicious code...

Malicious code in blitz-stream-convict-webdriverio (npm)

The package blitz-stream-convict-webdriverio was found to contain malicious code...

MAL-2025-28354 Malicious code in ophiuchus-phoenix-rimraf-convict (npm)

The package ophiuchus-phoenix-rimraf-convict was found to contain malicious code...

MAL-2025-23251 Malicious code in install-zenobia-convict-backend (npm)

The package install-zenobia-convict-backend was found to contain malicious code...

The vulnerability of Mozilla Convict’s library involves uncontrolled changes to object prototype attributes, allowing attackers to execute arbitrary code.

The vulnerability of the Mozilla Convict library is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2023-0163

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mozilla Convict. This allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a...

CVE-2023-0163 Prototype Pollution in convict

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mozilla Convict. This allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a...

CVE-2023-0163 Prototype Pollution in convict

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mozilla Convict. This allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a...

CVE-2023-0163 Prototype Pollution in convict

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mozilla Convict. This allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a...