176 matches found
CVE-2026-16735
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
CVE-2026-16735 release-it conventional-changelog Changelog File index.js writeChangelog os command injection
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
CVE-2026-16735 release-it conventional-changelog Changelog File index.js writeChangelog os command injection
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
Malicious code in conventional-changelog-dash (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881ccc3d6c947645ee3866499931db298b0f2f7ac4a3d41dd9acf806d4e6d702 The package conventional-changelog-dash was found to contain malicious code. Source: ossf-package-analysis...
MAL-2026-2700 Malicious code in conventional-changelog-dash (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881ccc3d6c947645ee3866499931db298b0f2f7ac4a3d41dd9acf806d4e6d702 The package conventional-changelog-dash was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-177158
Malicious code in pipe-cz-conventional-changelog-meissa-canopus npm...
EUVD-2025-179425
Malicious code in cz-conventional-changelog-sirius-cluster-tectonophysics npm...
EUVD-2025-177811
Malicious code in miranda-fomalhaut-apollo-cz-conventional-changelog npm...
EUVD-2025-179424
Malicious code in cz-conventional-changelog-stop-readable-mutation npm...
EUVD-2025-179428
Malicious code in cz-conventional-changelog-heliophysics-carpo-mocha npm...
EUVD-2025-179734
Malicious code in chromedriver-hyperion-isostasy-cz-conventional-changelog npm...
EUVD-2025-178548
Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado npm...
Malicious code in cz-conventional-changelog-stop-readable-mutation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409af1f40cee40b2159b3a8d5e2b0d4416b25c8e18bff01a890829e0bb75d7af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178708
Malicious code in glaciology-wormhole-cz-conventional-changelog-oauth npm...
EUVD-2025-176637
Malicious code in rigel-miranda-cache-cz-conventional-changelog npm...
EUVD-2025-179339
Malicious code in deneb-bellatrix-eridanus-cz-conventional-changelog npm...
EUVD-2025-177587
Malicious code in nightwatch-server-pino-pretty-cz-conventional-changelog npm...
EUVD-2025-179011
Malicious code in europa-polaris-terraforming-cz-conventional-changelog npm...