Malicious Package

Overview arif-teh20-riris is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview bella-tomat21-riris is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview armedclownfishz3n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

ROOT-APP-NPM-CVE-2024-21529 CVE-2024-21529 in dset - Patched by Root

Root has patched CVE-2024-21529 in the dset package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-25645 CVE-2022-25645 in dset - Patched by Root

Root has patched CVE-2022-25645 in the dset package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-47068 CVE-2024-47068 in rollup - Patched by Root

Root has patched CVE-2024-47068 in the rollup package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-39363 CVE-2026-39363 in vite - Patched by Root

Root has patched CVE-2026-39363 in the vite package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-53571 CVE-2026-53571 in vite - Patched by Root

Root has patched CVE-2026-53571 in the vite package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2021-23436 CVE-2021-23436 in immer - Patched by Root

Root has patched CVE-2021-23436 in the immer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2021-3757 CVE-2021-3757 in immer - Patched by Root

Root has patched CVE-2021-3757 in the immer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2020-28477 CVE-2020-28477 in immer - Patched by Root

Root has patched CVE-2020-28477 in the immer package for Root:npm. Multiple fixed versions available...

Malicious code in eyiouss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bedee2fc7da5658522543d3fe376d8fbf1d3bc8386eb8f53df3ee080830b250 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15836 Malicious code in eyiouss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bedee2fc7da5658522543d3fe376d8fbf1d3bc8386eb8f53df3ee080830b250 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in vitest-cli-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1262dc722ebac3b91301efde91e61df9ec9f65ccf91e51c15da53f9b518878b2 Package published as vitest-cli-pro ships a verbatim copy of nodemailer as cover; its declared postinstall runs lib/utils/index.js, which detaches a...

MAL-2026-15818 Malicious code in vitest-cli-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1262dc722ebac3b91301efde91e61df9ec9f65ccf91e51c15da53f9b518878b2 Package published as vitest-cli-pro ships a verbatim copy of nodemailer as cover; its declared postinstall runs lib/utils/index.js, which detaches a...

MAL-2026-15817 Malicious code in peertube-plugin-poc-marker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff307f6227ac4a9217a899b419a6931ddfe0376cb0cc6ba3570c0f589247241c index.js runs id; uname -a; hostname; date -u; ls -d /var/www/peertube via execSync when PeerTube invokes the plugin's register hook, then POSTs the...

Malicious code in cminhouse-api-gateway-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42971bbb30a4cb0a1da27be3953339fdbda449e4d10e997aac72212df0a8b1d index.js is wired as the package's postinstall script and also runs on require via main. After skipping CI/test/Docker environments guards on...

MAL-2026-15815 Malicious code in cminhouse-api-gateway-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42971bbb30a4cb0a1da27be3953339fdbda449e4d10e997aac72212df0a8b1d index.js is wired as the package's postinstall script and also runs on require via main. After skipping CI/test/Docker environments guards on...

MAL-2026-15812 Malicious code in eslint-rxjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2794273ee7e40da4b37c017636209acf1402b1104ab5fc265a43cc7d83228e72 eslint-rxjs is a masquerade package whose npm metadata is internally inconsistent: the name references ESLint/RxJS, the description reads 'Integrate...

Malicious code in eslint-rxjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2794273ee7e40da4b37c017636209acf1402b1104ab5fc265a43cc7d83228e72 eslint-rxjs is a masquerade package whose npm metadata is internally inconsistent: the name references ESLint/RxJS, the description reads 'Integrate...