14 matches found
@designid/tokens (0.1.1), @directus/vue-split-panel (>=0.1.0, <=0.8.2) +11 more potentially affected by CVE-2026-50014 via pnpm (>=10.0.0, <=10.33.2)
pnpm NPM version =10.0.0, =0.1.0, =1.1.1, =3.7.16, =0.1.8, =0.1.0, =2.7.2, =0.0.2, =0.2.5, =1.0.4, =1.0.7 Source cves: CVE-2026-50014 Source advisory: OSV:GHSA-P4XF-RF54-RJ3X...
@designid/tokens (0.1.1), @directus/vue-split-panel (>=0.1.0, <=0.8.2) +11 more potentially affected by CVE-2026-50573 via pnpm (>=10.0.0, <=10.33.2)
pnpm NPM version =10.0.0, =0.1.0, =1.1.1, =3.7.16, =0.1.8, =0.1.0, =2.7.2, =0.0.2, =0.2.5, =1.0.4, =1.0.7 Source cves: CVE-2026-50573 Source advisory: OSV:GHSA-54HH-G5MX-JQCP...
Malicious Package
Overview @validate-ethereum-address/core is a malicious package. This package contains malicious code, and its content was not yet removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizatio...
@ai-tools/console-monkey-patch (0.0.1), @ai-tools/terminal-emulator (>=0.0.1, <=0.0.2) +284 more potentially affected by CVE-2025-69262 via pnpm (>=6.35.1, <=10.18.3)
pnpm NPM version =6.35.1, =0.0.1, =0.0.1, =0.1.0, =1.0.0, =1.1.0, =0.0.0, =1.0.0 and more Source cves: CVE-2025-69262 Source advisory: OSV:GHSA-2PHV-J68V-WWQX...
Malicious code in elf-stats-sleighing-hammer-902 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b59e6f3e736d07e9305a2c51519d0635a8c24eca451d83955f59221c5f5fb29 The package elf-stats-sleighing-hammer-902 was found to contain malicious code...
MAL-2025-1956 Malicious code in web-attendant (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1822 Malicious code in google-internal (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1801 Malicious code in epicagames-database (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1727 Malicious code in apple-admin (npm)
--- -= Per source details. Do not edit below this line.=-...
ROS-20230616-08
The npm package manager vulnerability is related to the npm package ignoring the file exclusion directives .gitignore and .npmignore root-level file exclusions when run in a workspace or with the workspace flag e.g., --workspaces, --workspace=. Exploitation of the vulnerability could allow an...
ROS-20230616-01
The npm package manager vulnerability is related to the npm package ignoring the file exclusion directives .gitignore and .npmignore root-level file exclusions when run in a workspace or with the workspace flag e.g., --workspaces, --workspace=. Exploitation of the vulnerability could allow an...
Vulnerability of the `exec` function in the gulp-scss-lint package from the NPM package manager, allowing attackers to execute arbitrary commands.
The vulnerability of the exec function in the src/command.js file of the gulp-scss-lint package exists because measures to eliminate special elements used in operating system commands have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
PT-2019-1104 · Npm +6 · Npm Cli +6
Name of the Vulnerable Software and Affected Versions: npm CLI versions prior to 6.13.4 Description: The issue allows for an Arbitrary File Overwrite due to the failure to prevent existing globally-installed binaries from being overwritten by other package installations. For example, if a package...
