Malicious code in alchemy-o0bup-rj9h1-drift-project (npm)

The package alchemy-o0bup-rj9h1-drift-project was found to contain malicious code...

Malicious code in alchemy-in4kp-dbli8-quasar-project (npm)

The package alchemy-in4kp-dbli8-quasar-project was found to contain malicious code...

Malicious code in alchemy-5iqmn-ac151-nymph-project (npm)

The package alchemy-5iqmn-ac151-nymph-project was found to contain malicious code...

Malicious code in alchemy-rg5mi-8o61m-gale-project (npm)

The package alchemy-rg5mi-8o61m-gale-project was found to contain malicious code...

MAL-2025-27954 Malicious code in nymph-j9yhw-pnwb0-alchemy-project (npm)

The package nymph-j9yhw-pnwb0-alchemy-project was found to contain malicious code...

MAL-2025-29149 Malicious code in phoenix_12qwt_11wmc_alchemy (npm)

The package phoenix12qwt11wmcalchemy was found to contain malicious code...

MAL-2025-14272 Malicious code in alchemy-5iqmn-ac151-nymph-project (npm)

The package alchemy-5iqmn-ac151-nymph-project was found to contain malicious code...

MAL-2025-21599 Malicious code in glow-wds16-y23uq-alchemy-project (npm)

The package glow-wds16-y23uq-alchemy-project was found to contain malicious code...

MAL-2025-14273 Malicious code in alchemy-5p9dp-k62ml-zenith-project (npm)

The package alchemy-5p9dp-k62ml-zenith-project was found to contain malicious code...

MAL-2025-14275 Malicious code in alchemy-o0bup-rj9h1-drift-project (npm)

The package alchemy-o0bup-rj9h1-drift-project was found to contain malicious code...

Malicious code in alchemy-5p9dp-k62ml-zenith-project (npm)

The package alchemy-5p9dp-k62ml-zenith-project was found to contain malicious code...

MAL-2025-38613 Malicious code in vortex_qmviz_z8i7w_alchemy (npm)

The package vortexqmvizz8i7walchemy was found to contain malicious code...

MAL-2025-14277 Malicious code in alchemy-s89r2-1zvdy-lucid-project (npm)

The package alchemy-s89r2-1zvdy-lucid-project was found to contain malicious code...

MAL-2025-24393 Malicious code in kelp-mieow-7b9r2-alchemy-project (npm)

The package kelp-mieow-7b9r2-alchemy-project was found to contain malicious code...

MAL-2025-38488 Malicious code in vista-pvyte-je2v2-alchemy-project (npm)

The package vista-pvyte-je2v2-alchemy-project was found to contain malicious code...

MAL-2025-21151 Malicious code in gale-svtyl-d57z0-alchemy-project (npm)

The package gale-svtyl-d57z0-alchemy-project was found to contain malicious code...

MAL-2025-14276 Malicious code in alchemy-rg5mi-8o61m-gale-project (npm)

The package alchemy-rg5mi-8o61m-gale-project was found to contain malicious code...

MAL-2025-14271 Malicious code in alchemy-3k0rp-mvdxg-flora-project (npm)

The package alchemy-3k0rp-mvdxg-flora-project was found to contain malicious code...

CVE-2022-41703

A vulnerability in the SQL Alchemy connector of Apache Superset allows an authenticated user with read access to a specific database to add subqueries to the WHERE and HAVING fields referencing tables on the same database that the user should not have access to, despite the user having the featur...

CVE-2025-46834 Alchemy's Modular Account can use executeUserOp to bypass allowlist prevalidation hook

Alchemy's Modular Account is a smart contract account that is compatible with ERC-4337 and ERC-6900. In versions on the 2.x branch prior to commit 5e6f540d249afcaeaf76ab95517d0359fde883b0, owners of Modular Accounts can grant session keys scoped external keys to external parties and would use the...