Malicious code in uglify-js-lint-cosmochemistry-publish (npm)

The package uglify-js-lint-cosmochemistry-publish was found to contain malicious code...

MAL-2025-37581 Malicious code in uglify-js-google-rimraf-panspermia (npm)

The package uglify-js-google-rimraf-panspermia was found to contain malicious code...

MAL-2025-34082 Malicious code in stream-uglify-js-aldebaran-framework (npm)

The package stream-uglify-js-aldebaran-framework was found to contain malicious code...

Malicious code in stream-uglify-js-aldebaran-framework (npm)

The package stream-uglify-js-aldebaran-framework was found to contain malicious code...

Malicious code in grus-asthenosphere-uglify-js-corvus (npm)

The package grus-asthenosphere-uglify-js-corvus was found to contain malicious code...

MAL-2025-32136 Malicious code in resolvers-uglify-js-exobiology-subduction (npm)

The package resolvers-uglify-js-exobiology-subduction was found to contain malicious code...

MAL-2025-36714 Malicious code in testcafe-bellatrix-axios-uglify-js (npm)

The package testcafe-bellatrix-axios-uglify-js was found to contain malicious code...

MAL-2025-15585 Malicious code in bellatrix-middleware-update-uglify-js (npm)

The package bellatrix-middleware-update-uglify-js was found to contain malicious code...

MAL-2025-33087 Malicious code in shelljs-uglify-js-nova-xml (npm)

The package shelljs-uglify-js-nova-xml was found to contain malicious code...

CVE-2022-25858 affecting package uglify-js for versions less than 3.19.3-11

CVE-2022-25858 affecting package uglify-js for versions less than 3.19.3-11. An upgraded version of the package is available that resolves this issue...

Security Bulletin: A security vulnerability in Nodejs uglify-js affects IBM Cloud Pak for Multicloud Management Managed Services

Summary A security vulnerability in Nodejs uglify-js affects IBM Cloud Pak for Multicloud Management Managed Services Vulnerability Details IBM X-Force ID: 218243 DESCRIPTION: The Node.js uglify-js module is vulnerable to a denial of service, caused by an error in the stringtemplate and the...

Regular Expression Denial Of Service (ReDoS)

uglify-js is vulnerable to regular expression denial of service ReDoS. The inefficient regex pattern used in stringtemplate function in utils.js allows an attacker to input a malicious string, leading to an application crash...

uglify-js bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

High severity vulnerability that affects uglify-js

Withdrawn, accidental duplicate publish. The uglify-js package before 2.4.24 for Node.js does not properly account for non-boolean values when rewriting boolean expressions, which might allow attackers to bypass security mechanisms or possibly have unspecified other impact by leveraging improperl...

04_nodeblog (1.0.0), 0latency (0.0.0) +10641 more potentially affected by CVE-2015-8857 via uglify-js (>=2.2.0, <=2.4.23)

uglify-js NPM version =2.2.0, =0.3.0, =0.0.1, =1.0.1, =1.0.0, =0.0.1-alpha, =0.1.1, =0.2.8, =0.1.0, =0.3.2 and more Source cves: CVE-2015-8857 Source advisory: OSV:GHSA-34R7-Q49F-H37C...

04_nodeblog (1.0.0), 08cms (1.0.0) +12651 more potentially affected by CVE-2015-8858 via uglify-js (>=2.2.0, <=2.5.0)

uglify-js NPM version =2.2.0, =0.3.0, =0.0.1, =1.0.1, =1.0.0, =0.0.1-alpha, =0.1.1, =0.2.8, =1.5.3 and more Source cves: CVE-2015-8858 Source advisory: OSV:GHSA-C9F4-XJ24-8JQX...

GHSA-34R7-Q49F-H37C Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js

Versions of uglify-js prior to 2.4.24 are affected by a vulnerability which may cause crafted JavaScript to have altered functionality after minification. Recommendation Upgrade UglifyJS to version = 2.4.24...

GHSA-C9F4-XJ24-8JQX Regular Expression Denial of Service in uglify-js

Versions of uglify-js prior to 2.6.0 are affected by a regular expression denial of service vulnerability when malicious inputs are passed into the parse method. Proof of Concept var u = require'uglify-js'; var genstr = function len, chr var result = ""; for i=0; i=len; i++ result = result + chr;...

Regular Expression Denial of Service in uglify-js

Versions of uglify-js prior to 2.6.0 are affected by a regular expression denial of service vulnerability when malicious inputs are passed into the parse method. Proof of Concept var u = require'uglify-js'; var genstr = function len, chr var result = ""; for i=0; i=len; i++ result = result + chr;...

Security feature bypass

The uglify-js package before 2.4.24 for Node.js does not properly account for non-boolean values when rewriting boolean expressions, which might allow attackers to bypass security mechanisms or possibly have unspecified other impact by leveraging improperly rewritten Javascript...