Astra Linux – Vulnerability in node-browserify-sign

“browserify-sign” is a package that duplicates the functionality of Node’s crypto public key functions. Much of this functionality is based on Fedor Indutny’s work on “indutny/tls.js”. There is a issue with upper-bound checks in the “dsaVerify” function, which allows attackers to create signature...

CVE-2022-37621

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js...

CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

EUVD-2025-178931

Malicious code in fermion-solis-wezen-browserify npm...

EUVD-2025-177803

Malicious code in miranda-native-alphard-browserify npm...

EUVD-2025-179970

Malicious code in browserify-astrometry-stratigraphy-foundation npm...

Malicious code in browserify-astrometry-stratigraphy-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245bdbb5c5bf35b2ed8cce928d9902f8c580a23fb021cbe85fddc30550eb7c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176367

Malicious code in singularity-darkmatter-janus-browserify npm...

EUVD-2025-179968

Malicious code in browserify-eslint-plugin-heka-mui npm...

EUVD-2025-177650

Malicious code in neptune-vega-slides-browserify npm...

EUVD-2025-179019

Malicious code in ethology-zephyr-dorado-browserify npm...

EUVD-2025-175607

Malicious code in webdriver-mocha-browserify-polaris-cache npm...

EUVD-2025-180253

Malicious code in atlas-browserify-rigel-mira npm...

EUVD-2025-176160

Malicious code in sublimation-archaeoastronomy-browserify-build npm...

MAL-2025-188079 Malicious code in miranda-native-alphard-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87962789ed9ae812165f1253ddd66dfc007bb8159135fc21ee856412172029f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185917 Malicious code in browserify-sedna-apollo-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9274311e3df04e5c51c1bd2fd4419846f61128c31217b919fde8910c9c1e8e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179966

Malicious code in browserify-nodemon-proxima-markdown npm...

EUVD-2025-178063

Malicious code in lithosphere-browserify-express-spectron npm...

EUVD-2025-176230

Malicious code in standard-browserify-petrology-oscillation npm...

Malicious code in deimos-concurrently-outercore-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffa621761675fd2e3ec7b468f01d71eee4ac950beb2e51f7e89d5533a0a6b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...