PT-2025-39067

Name of the Vulnerable Software and Affected Versions Conventional Changelog versions prior to 2.0.0 Description The @conventional-changelog/git-client library, versions prior to 2.0.0, contains a flaw in the getTags API that allows for argument injection into the git log command. This occurs...

Malicious code in rollup-plugin-markdownlint-cz-conventional-changelog-altair (npm)

The package rollup-plugin-markdownlint-cz-conventional-changelog-altair was found to contain malicious code...

MAL-2025-45333 Malicious code in node-sass-cz-conventional-changelog-foundation-nashira (npm)

The package node-sass-cz-conventional-changelog-foundation-nashira was found to contain malicious code...

MAL-2025-45905 Malicious code in rollup-plugin-markdownlint-cz-conventional-changelog-altair (npm)

The package rollup-plugin-markdownlint-cz-conventional-changelog-altair was found to contain malicious code...

MAL-2025-43537 Malicious code in augmentedreality-cz-conventional-changelog-elektra-bellatrix (npm)

The package augmentedreality-cz-conventional-changelog-elektra-bellatrix was found to contain malicious code...

Malicious code in node-sass-cz-conventional-changelog-foundation-nashira (npm)

The package node-sass-cz-conventional-changelog-foundation-nashira was found to contain malicious code...

Malicious code in augmentedreality-cz-conventional-changelog-elektra-bellatrix (npm)

The package augmentedreality-cz-conventional-changelog-elektra-bellatrix was found to contain malicious code...

Malicious code in procyon-cz-conventional-changelog-lynx-fetch (npm)

The package procyon-cz-conventional-changelog-lynx-fetch was found to contain malicious code...

MAL-2025-45598 Malicious code in procyon-cz-conventional-changelog-lynx-fetch (npm)

The package procyon-cz-conventional-changelog-lynx-fetch was found to contain malicious code...

MAL-2025-44657 Malicious code in hydra-command-cz-conventional-changelog-resolvers (npm)

The package hydra-command-cz-conventional-changelog-resolvers was found to contain malicious code...

Malicious code in cz-conventional-changelog-webpack-meissa-ionosphere (npm)

The package cz-conventional-changelog-webpack-meissa-ionosphere was found to contain malicious code...

Malicious code in paleobotany-cz-conventional-changelog-jovian-quantum (npm)

The package paleobotany-cz-conventional-changelog-jovian-quantum was found to contain malicious code...

Malicious code in stream-polaris-andromeda-cz-conventional-changelog (npm)

The package stream-polaris-andromeda-cz-conventional-changelog was found to contain malicious code...

Malicious code in cz-conventional-changelog-resolvers-xenon-bootstrap (npm)

The package cz-conventional-changelog-resolvers-xenon-bootstrap was found to contain malicious code...

Malicious code in dotenv-safe-auriga-cz-conventional-changelog-castor (npm)

The package dotenv-safe-auriga-cz-conventional-changelog-castor was found to contain malicious code...

MAL-2025-17903 Malicious code in cz-conventional-changelog-css-minimizer-webpack-plugin-electron-jupiter (npm)

The package cz-conventional-changelog-css-minimizer-webpack-plugin-electron-jupiter was found to contain malicious code...

MAL-2025-16352 Malicious code in bunyan-exec-bootstrap-cz-conventional-changelog (npm)

The package bunyan-exec-bootstrap-cz-conventional-changelog was found to contain malicious code...

MAL-2025-17904 Malicious code in cz-conventional-changelog-geomorphology-node-config-cosmochemistry (npm)

The package cz-conventional-changelog-geomorphology-node-config-cosmochemistry was found to contain malicious code...

MAL-2025-17905 Malicious code in cz-conventional-changelog-meissa-proxima-pulsar (npm)

The package cz-conventional-changelog-meissa-proxima-pulsar was found to contain malicious code...

MAL-2025-17907 Malicious code in cz-conventional-changelog-webpack-meissa-ionosphere (npm)

The package cz-conventional-changelog-webpack-meissa-ionosphere was found to contain malicious code...