Astra Linux – Vulnerability in node-browserify-sign

“browserify-sign” is a package that duplicates the functionality of Node’s crypto public key functions. Much of this functionality is based on Fedor Indutny’s work on “indutny/tls.js”. There is a issue with upper-bound checks in the “dsaVerify” function, which allows attackers to create signature...

CVE-2022-37621

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js...

CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

EUVD-2025-179965

Malicious code in browserify-sedna-apollo-airbnb npm...

EUVD-2025-177928

Malicious code in mdx-kaus-browserify-deimos npm...

EUVD-2025-179964

Malicious code in browserify-seismology-vega-quito npm...

EUVD-2025-176367

Malicious code in singularity-darkmatter-janus-browserify npm...

Malicious code in redis-browserify-nuxtjs-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711d716900670192f72189f880361a7e02ddd5ee99dcbecd1465b28f95bee624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178063

Malicious code in lithosphere-browserify-express-spectron npm...

EUVD-2025-176230

Malicious code in standard-browserify-petrology-oscillation npm...

Malicious code in browserify-astrometry-stratigraphy-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245bdbb5c5bf35b2ed8cce928d9902f8c580a23fb021cbe85fddc30550eb7c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179969

Malicious code in browserify-cosmiconfig-testcafe-await npm...

EUVD-2025-179822

Malicious code in centaurus-browserify-run-script-interferometry npm...

Malicious code in mdx-kaus-browserify-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35c481bdc9c3cd04791a4bd2aea3c97faf1ab41752bdeaa06954b53da493801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179967

Malicious code in browserify-izar-archaeogenetics-darkmatter npm...

EUVD-2025-178942

Malicious code in farout-hydrogeology-juno-browserify npm...

EUVD-2025-176160

Malicious code in sublimation-archaeoastronomy-browserify-build npm...

EUVD-2025-179966

Malicious code in browserify-nodemon-proxima-markdown npm...

EUVD-2025-180253

Malicious code in atlas-browserify-rigel-mira npm...

EUVD-2025-177803

Malicious code in miranda-native-alphard-browserify npm...