338 matches found
CLSA-2026-1782521955 TuxCare security update for browserify-sign (1 CVE)
TuxCare rebuilt browserify-sign to address 1 CVE. Fixed in 4.0.4-tuxcare.1...
CLSA-2026-1782521956 TuxCare security update for browserify-sign (3 CVEs)
TuxCare rebuilt browserify-sign to address 3 CVEs. Fixed in 4.2.1-tuxcare.1...
Astra Linux – Vulnerability in node-browserify-sign
“browserify-sign” is a package that duplicates the functionality of Node’s crypto public key functions. Much of this functionality is based on Fedor Indutny’s work on “indutny/tls.js”. There is a issue with upper-bound checks in the “dsaVerify” function, which allows attackers to create signature...
CVE-2022-37621
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js...
CVE-2022-37617
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...
EUVD-2025-177650
Malicious code in neptune-vega-slides-browserify npm...
EUVD-2025-176160
Malicious code in sublimation-archaeoastronomy-browserify-build npm...
EUVD-2025-180253
Malicious code in atlas-browserify-rigel-mira npm...
EUVD-2025-179970
Malicious code in browserify-astrometry-stratigraphy-foundation npm...
EUVD-2025-176367
Malicious code in singularity-darkmatter-janus-browserify npm...
EUVD-2025-177803
Malicious code in miranda-native-alphard-browserify npm...
EUVD-2025-178931
Malicious code in fermion-solis-wezen-browserify npm...
EUVD-2025-179968
Malicious code in browserify-eslint-plugin-heka-mui npm...
EUVD-2025-175607
Malicious code in webdriver-mocha-browserify-polaris-cache npm...
MAL-2025-188079 Malicious code in miranda-native-alphard-browserify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87962789ed9ae812165f1253ddd66dfc007bb8159135fc21ee856412172029f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in browserify-astrometry-stratigraphy-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245bdbb5c5bf35b2ed8cce928d9902f8c580a23fb021cbe85fddc30550eb7c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179019
Malicious code in ethology-zephyr-dorado-browserify npm...
MAL-2025-185917 Malicious code in browserify-sedna-apollo-airbnb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9274311e3df04e5c51c1bd2fd4419846f61128c31217b919fde8910c9c1e8e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...