MAL-2025-23088 Malicious code in import-user-reject-decode-async (npm)

The package import-user-reject-decode-async was found to contain malicious code...

Malicious code in import-user-reject-decode-async (npm)

The package import-user-reject-decode-async was found to contain malicious code...

Uncontrolled Resource Consumption ('Resource Exhaustion')

Overview Affected versions of this package are vulnerable to Uncontrolled Resource Consumption 'Resource Exhaustion' through the Gif decoder. An attacker can cause the application to consume excessive memory resources by processing specially crafted image files. Workaround This vulnerability can ...