5774 matches found
Malicious code in rtc-js-demo (npm)
The package rtc-js-demo was found to contain malicious code...
declarative-js (>=0.0.0, <=0.0.2) potentially affected by unknown CVE via andthen (0.0.2)
andthen NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on andthen and may be impacted: - declarative-js =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14514...
brick-node (>=0.0.8, <=0.0.17), bud (0.0.3) +18 more potentially affected by unknown CVE via new-command (>=0.0.0, <=2.0.0)
new-command NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =0.0.3, =0.0.4, =0.0.5 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-27359...
on-duty-js (3.0.0), todo-app-23426 (1.0.0) potentially affected by unknown CVE via chalkk (0.0.1-security)
chalkk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chalkk and may be impacted: - on-duty-js 3.0.0 - todo-app-23426 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16776...
Malicious code in js-shq3 (npm)
The package js-shq3 was found to contain malicious code...
Malicious code in csv-uglify-js-protractor-grus (npm)
The package csv-uglify-js-protractor-grus was found to contain malicious code...
Malicious code in glints-js-sdk (npm)
The package glints-js-sdk was found to contain malicious code...
Malicious code in js-sla3 (npm)
The package js-sla3 was found to contain malicious code...
Malicious code in bunker-to-js (npm)
The package bunker-to-js was found to contain malicious code...
bud (>=0.0.0, <=0.1.2), declarative-js (>=0.0.0, <=0.0.2) +3 more potentially affected by unknown CVE via new-partial (0.0.1)
new-partial NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on new-partial and may be impacted: - bud =0.0.0, =0.0.0, =0.0.1, =0.0.0, =0.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27364...
Malicious code in string-magnetosphere-webdriver-mocha-uglify-js (npm)
The package string-magnetosphere-webdriver-mocha-uglify-js was found to contain malicious code...
Malicious code in orderly-js-sdk-nextjs-template (npm)
The package orderly-js-sdk-nextjs-template was found to contain malicious code...
Malicious code in homematic-js-km200 (npm)
The package homematic-js-km200 was found to contain malicious code...
Malicious code in js-shi3 (npm)
The package js-shi3 was found to contain malicious code...
Malicious code in jetpack-js-tools (npm)
The package jetpack-js-tools was found to contain malicious code...
Malicious code in commander-js (npm)
The package commander-js was found to contain malicious code...
Malicious code in simple-js-shake (npm)
The package simple-js-shake was found to contain malicious code...
MAL-2025-25223 Malicious code in lib-deepdocs-js (npm)
The package lib-deepdocs-js was found to contain malicious code...
jl-wechat-sdk (>=1.0.0, <=1.2.3) potentially affected by unknown CVE via crpyto-js (0.0.1-security)
crpyto-js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crpyto-js and may be impacted: - jl-wechat-sdk =1.0.0, =1.2.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17718...