Astra Linux – Vulnerability in node-browserify-sign

“browserify-sign” is a package that duplicates the functionality of Node’s crypto public key functions. Much of this functionality is based on Fedor Indutny’s work on “indutny/tls.js”. There is a issue with upper-bound checking in the “dsaVerify” function, which allows an attacker to create...

CVE-2022-37621

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js...

CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

Malicious code in browserify-astrometry-stratigraphy-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245bdbb5c5bf35b2ed8cce928d9902f8c580a23fb021cbe85fddc30550eb7c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-kaus-browserify-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35c481bdc9c3cd04791a4bd2aea3c97faf1ab41752bdeaa06954b53da493801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176160

Malicious code in sublimation-archaeoastronomy-browserify-build npm...

Malicious code in hermes-browserify-alphard-greatfilter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30708db9226924c56d46254043ab17828ef65f1ed22ce45bc6353202adddb3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redis-browserify-nuxtjs-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711d716900670192f72189f880361a7e02ddd5ee99dcbecd1465b28f95bee624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176291

Malicious code in solarnebula-browserify-lightyear-nextjs npm...

EUVD-2025-176230

Malicious code in standard-browserify-petrology-oscillation npm...

EUVD-2025-177803

Malicious code in miranda-native-alphard-browserify npm...

EUVD-2025-177650

Malicious code in neptune-vega-slides-browserify npm...

EUVD-2025-176367

Malicious code in singularity-darkmatter-janus-browserify npm...

EUVD-2025-177928

Malicious code in mdx-kaus-browserify-deimos npm...

EUVD-2025-178063

Malicious code in lithosphere-browserify-express-spectron npm...

EUVD-2025-179019

Malicious code in ethology-zephyr-dorado-browserify npm...

EUVD-2025-178931

Malicious code in fermion-solis-wezen-browserify npm...

EUVD-2025-180253

Malicious code in atlas-browserify-rigel-mira npm...

EUVD-2025-179965

Malicious code in browserify-sedna-apollo-airbnb npm...

EUVD-2025-179822

Malicious code in centaurus-browserify-run-script-interferometry npm...