MAL-2025-21108 Malicious code in gacrux-iota-exec-shelljs (npm)

The package gacrux-iota-exec-shelljs was found to contain malicious code...

MAL-2025-23874 Malicious code in joviology-shelljs-sass-loader-areology (npm)

The package joviology-shelljs-sass-loader-areology was found to contain malicious code...

MAL-2025-22396 Malicious code in hermes-fornax-typeorm-shelljs (npm)

The package hermes-fornax-typeorm-shelljs was found to contain malicious code...

MAL-2025-29644 Malicious code in primatology-blackhole-shelljs-draco (npm)

The package primatology-blackhole-shelljs-draco was found to contain malicious code...

MAL-2025-26577 Malicious code in mocha-janus-shelljs-dorado (npm)

The package mocha-janus-shelljs-dorado was found to contain malicious code...

MAL-2025-33087 Malicious code in shelljs-uglify-js-nova-xml (npm)

The package shelljs-uglify-js-nova-xml was found to contain malicious code...

Malicious code in geochemistry-shelljs-terser-webpack-plugin-koa (npm)

The package geochemistry-shelljs-terser-webpack-plugin-koa was found to contain malicious code...

Malicious code in auriga-soap-subscription-shelljs (npm)

The package auriga-soap-subscription-shelljs was found to contain malicious code...

Malicious code in shelljs-ursa-vortex-blueshift (npm)

The package shelljs-ursa-vortex-blueshift was found to contain malicious code...

Malicious code in hermes-fornax-typeorm-shelljs (npm)

The package hermes-fornax-typeorm-shelljs was found to contain malicious code...

Malicious code in centauri-ariel-shelljs-iota (npm)

The package centauri-ariel-shelljs-iota was found to contain malicious code...

Malicious code in nodemon-orogeny-shelljs-extremophile (npm)

The package nodemon-orogeny-shelljs-extremophile was found to contain malicious code...

Malicious code in joviology-shelljs-sass-loader-areology (npm)

The package joviology-shelljs-sass-loader-areology was found to contain malicious code...

Malicious code in archaeogenetics-deimos-avior-shelljs (npm)

The package archaeogenetics-deimos-avior-shelljs was found to contain malicious code...

MAL-2025-28037 Malicious code in oberon-shelljs-build-development (npm)

The package oberon-shelljs-build-development was found to contain malicious code...

The vulnerability of the exec() function in the ShellJS interpreter allows a malicious actor to gain unauthorized access to protected information, increase privileges, or cause service failures.

The vulnerability of the exec function in the ShellJS interpreter is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, increase privileges, or cause service failures through specially created...

ROS-20220516-01

A vulnerability in shelljs, an implementation of Unix shell commands on top of the Node.js API, is related to the fact that the application does not properly enforce security restrictions. Exploitation of the vulnerability could allow an attacker to bypass security restrictions and escalate...

Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.4.3 security updates and bug fixes

Red Hat Advanced Cluster Management for Kubernetes 2.4.3 General Availability release images. This update provides security fixes, bug fixes, and updates the container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring...

Improper Privilege Management in shelljs

shelljs is vulnerable to Improper Privilege Management...

GHSA-4RQ4-32RV-6WP6 Improper Privilege Management in shelljs

shelljs is vulnerable to Improper Privilege Management...