60 matches found
Malicious code in harp-86myn-b5m8t-dusk-project (npm)
The package harp-86myn-b5m8t-dusk-project was found to contain malicious code...
Malicious code in harp-xru52-rref5-verdant-project (npm)
The package harp-xru52-rref5-verdant-project was found to contain malicious code...
Malicious code in zephyr-doa40-h7phj-harp-project (npm)
The package zephyr-doa40-h7phj-harp-project was found to contain malicious code...
Malicious code in harp-8uplv-sqsxc-harmony-project (npm)
The package harp-8uplv-sqsxc-harmony-project was found to contain malicious code...
MAL-2025-11956 Malicious code in @zalastax/nolb-harp (npm)
The package @zalastax/nolb-harp was found to contain malicious code...
MAL-2025-22240 Malicious code in harp-xru52-rref5-verdant-project (npm)
The package harp-xru52-rref5-verdant-project was found to contain malicious code...
MAL-2025-18787 Malicious code in drift-4sof4-88og5-harp-project (npm)
The package drift-4sof4-88og5-harp-project was found to contain malicious code...
Malicious code in harp-theme-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 001eaac73946b4fd360a3e1455f62b3a488a6080e68337409bb6ba1993bd40d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in harp-atlas-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 022ae8a7abfe3be6606aca88e7aa6a0c1f14c518c523a6652b335f01d520e3b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3564 Malicious code in harp-theme-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 001eaac73946b4fd360a3e1455f62b3a488a6080e68337409bb6ba1993bd40d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3563 Malicious code in harp-atlas-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 022ae8a7abfe3be6606aca88e7aa6a0c1f14c518c523a6652b335f01d520e3b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-9PR3-7449-977R Cross-Site Scripting in express-cart
All versions of harp are vulnerable to Cross-Site Scripting. In the admin page it is possible to inject arbitrary JavaScript as a new product option, allowing attackers to execute arbitrary code. This is limited to the admin page and does not affect other pages. Recommendation No fix is currently...
Cross-Site Scripting in express-cart
All versions of harp are vulnerable to Cross-Site Scripting. In the admin page it is possible to inject arbitrary JavaScript as a new product option, allowing attackers to execute arbitrary code. This is limited to the admin page and does not affect other pages. Recommendation No fix is currently...
Cross-Site Scripting in harp
Withdrawn This advisory has been withdrawn per request from the maintainer. Given harp is a static webserver, a XSS type of vulnerability is not appropriate. Original advisory description All versions of harp are vulnerable to Cross-Site Scripting. Due to misconfiguration of its rendering engine,...
GHSA-CX7R-634M-2Q2H Cross-Site Scripting in harp
Withdrawn This advisory has been withdrawn per request from the maintainer. Given harp is a static webserver, a XSS type of vulnerability is not appropriate. Original advisory description All versions of harp are vulnerable to Cross-Site Scripting. Due to misconfiguration of its rendering engine,...
Unauthorized File Access in harp
All versions of harp are vulnerable to Unauthorized File Access. If a symlink in the project's base directory points to a file outside of the directory, the file is served. This could allow an attacker to access sensitive files on the server. Recommendation No fix is currently available. Consider...
GHSA-6FMM-47QC-P4M4 Unauthorized File Access in harp
All versions of harp are vulnerable to Unauthorized File Access. If a symlink in the project's base directory points to a file outside of the directory, the file is served. This could allow an attacker to access sensitive files on the server. Recommendation No fix is currently available. Consider...
GHSA-46HV-7769-J7RX Unauthorized File Access in harp
Affected versions of harp are vulnerable to Unauthorized File Access. The package states that it ignores files and directories with names that start with an underscore, such as secret-folder. If the underscore character is URL encoded the server delivers the file. Recommendation Upgrade to versio...
Unauthorized File Access in harp
Affected versions of harp are vulnerable to Unauthorized File Access. The package states that it ignores files and directories with names that start with an underscore, such as secret-folder. If the underscore character is URL encoded the server delivers the file. Recommendation Upgrade to versio...
