Malicious code in common-js-support (npm)

The package common-js-support was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @finaxis/common-js (npm)

Source: amazon-inspector f708a31239d3dc7490906a4a41f5ccb3cb76c99f89bc87b5ad5884939bb2d308 Package is published with a README copied from lodash v4.18.1 and keywords 'lodash','lodash-js', but the sole shipped module dist/common-js.js is a heavily obfuscated bundle javascript-obfuscator with...

Malicious code in @finaxis/common-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 832d1ce61ce1f1e1430c60e94175cc80700dfbb2f8d0f46fd7d00b64720026d8 Package publishes under a lodash-imitating identity: keywords lodash/lodash-js, and the README is a verbatim copy of the official lodash 4.18.1 READM...

MAL-2026-14064 Malicious code in @finaxis/common-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 832d1ce61ce1f1e1430c60e94175cc80700dfbb2f8d0f46fd7d00b64720026d8 Package publishes under a lodash-imitating identity: keywords lodash/lodash-js, and the README is a verbatim copy of the official lodash 4.18.1 READM...

Malicious code in @dxcl/http-common-js (npm)

--- Credit: OpenSSF source...

Malicious code in @dxcl/http-common-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in db-plog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961a6a108104105727b81399e6a3a6d56636cb79ae8fbfbbc33528f90d890d99 On every Model instantiation — the package's documented primary API — dist/index.js executes execSync'npm install db-connector-log --no-warnings...

Happy DOM: VM Context Escape can lead to Remote Code Execution

Escape of VM Context gives access to process level functionality Summary Happy DOM v19 and lower contains a security vulnerability that puts the owner system at the risk of RCE Remote Code Execution attacks. A Node.js VM Context is not an isolated environment, and if the user runs untrusted...

PT-2025-41599

Name of the Vulnerable Software and Affected Versions Happy DOM versions 19 and lower Description Happy DOM, a JavaScript implementation of a web browser without a graphical user interface, contains a security issue that could lead to Remote Code Execution RCE attacks. The Node.js VM Context with...

MAL-2025-17427 Malicious code in common-js-support (npm)

The package common-js-support was found to contain malicious code...

Malicious code in common-js-support (npm)

The package common-js-support was found to contain malicious code...

MAL-2022-4539 Malicious code in medicare-common-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f29c05d6cee577d5f86a2a760c23578b65068f7e091dc6519990f798f42d30a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in medicare-common-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f29c05d6cee577d5f86a2a760c23578b65068f7e091dc6519990f798f42d30a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in medicare-common-js

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2022-2214 Malicious code in coupa-common-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28ab56baa4ae29cc928b7963454ff13548763cf6f79e7cb46da6b8dcbb514c4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in coupa-common-js

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in coupa-common-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28ab56baa4ae29cc928b7963454ff13548763cf6f79e7cb46da6b8dcbb514c4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora Update for guacamole-common-js FEDORA-2012-14179

Check for the Version of guacamole-common-js OpenVAS Vulnerability Test Fedora Update for guacamole-common-js FEDORA-2012-14179 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

Fedora Update for guacamole-common-js FEDORA-2012-14097

Check for the Version of guacamole-common-js OpenVAS Vulnerability Test Fedora Update for guacamole-common-js FEDORA-2012-14097 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

Fedora 17 : guacamole-common-0.6.1-2.fc17 / guacamole-common-js-0.6.1-2.fc17 / etc (2012-14179)

Guacamole C stack rebuild Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...