MAL-2025-22238 Malicious code in harp-8uplv-sqsxc-harmony-project (npm)

The package harp-8uplv-sqsxc-harmony-project was found to contain malicious code...

MAL-2025-11956 Malicious code in @zalastax/nolb-harp (npm)

The package @zalastax/nolb-harp was found to contain malicious code...

Malicious code in @zalastax/nolb-harp (npm)

The package @zalastax/nolb-harp was found to contain malicious code...

MAL-2025-18787 Malicious code in drift-4sof4-88og5-harp-project (npm)

The package drift-4sof4-88og5-harp-project was found to contain malicious code...

MAL-2025-33253 Malicious code in silk-r3uxk-e3mgb-harp-project (npm)

The package silk-r3uxk-e3mgb-harp-project was found to contain malicious code...

MAL-2025-37856 Malicious code in universe-jq5lc-cp1s4-harp-project (npm)

The package universe-jq5lc-cp1s4-harp-project was found to contain malicious code...

Malicious code in harp-xru52-rref5-verdant-project (npm)

The package harp-xru52-rref5-verdant-project was found to contain malicious code...

MAL-2025-22240 Malicious code in harp-xru52-rref5-verdant-project (npm)

The package harp-xru52-rref5-verdant-project was found to contain malicious code...

MAL-2025-22239 Malicious code in harp-cdng6-y0md2-dawn-project (npm)

The package harp-cdng6-y0md2-dawn-project was found to contain malicious code...

MAL-2025-22226 Malicious code in harmony-1inh6-b1o7d-harp-project (npm)

The package harmony-1inh6-b1o7d-harp-project was found to contain malicious code...

MAL-2025-40898 Malicious code in zephyr-doa40-h7phj-harp-project (npm)

The package zephyr-doa40-h7phj-harp-project was found to contain malicious code...

MAL-2025-22236 Malicious code in harp-86myn-b5m8t-dusk-project (npm)

The package harp-86myn-b5m8t-dusk-project was found to contain malicious code...

Malicious code in harp-atlas-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 022ae8a7abfe3be6606aca88e7aa6a0c1f14c518c523a6652b335f01d520e3b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in harp-theme-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 001eaac73946b4fd360a3e1455f62b3a488a6080e68337409bb6ba1993bd40d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3564 Malicious code in harp-theme-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 001eaac73946b4fd360a3e1455f62b3a488a6080e68337409bb6ba1993bd40d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3563 Malicious code in harp-atlas-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 022ae8a7abfe3be6606aca88e7aa6a0c1f14c518c523a6652b335f01d520e3b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cross-Site Scripting in express-cart

All versions of harp are vulnerable to Cross-Site Scripting. In the admin page it is possible to inject arbitrary JavaScript as a new product option, allowing attackers to execute arbitrary code. This is limited to the admin page and does not affect other pages. Recommendation No fix is currently...

GHSA-9PR3-7449-977R Cross-Site Scripting in express-cart

All versions of harp are vulnerable to Cross-Site Scripting. In the admin page it is possible to inject arbitrary JavaScript as a new product option, allowing attackers to execute arbitrary code. This is limited to the admin page and does not affect other pages. Recommendation No fix is currently...

Cross-Site Scripting in harp

Withdrawn This advisory has been withdrawn per request from the maintainer. Given harp is a static webserver, a XSS type of vulnerability is not appropriate. Original advisory description All versions of harp are vulnerable to Cross-Site Scripting. Due to misconfiguration of its rendering engine,...

GHSA-CX7R-634M-2Q2H Cross-Site Scripting in harp

Withdrawn This advisory has been withdrawn per request from the maintainer. Given harp is a static webserver, a XSS type of vulnerability is not appropriate. Original advisory description All versions of harp are vulnerable to Cross-Site Scripting. Due to misconfiguration of its rendering engine,...