Malicious code in crpyto (npm)

The package crpyto was found to contain malicious code...

MAL-2025-17718 Malicious code in crpyto-js (npm)

The package crpyto-js was found to contain malicious code...

MAL-2025-17717 Malicious code in crpyto (npm)

The package crpyto was found to contain malicious code...

Malicious code in crpyto-js (npm)

The package crpyto-js was found to contain malicious code...

jl-wechat-sdk (>=1.0.0 <=1.2.3) potentially affected by unknown CVE via crpyto-js (=0.0.1-security)

crpyto-js NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crpyto-js and may be impacted: - jl-wechat-sdk =1.0.0, =1.2.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17718...

CVE-2014-7189

crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the-middle attackers to spoof clients via unspecified vectors...