CVE-2025-59144

debug is a JavaScript debugging utility. On 8 September 2025, the npm publishing account for debug was taken over after a phishing attack. Version 4.4.2 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect cryptocurrency...

0.8.18-p11 (0.8.18-p12), 04_nodeblog (1.0.0) +37601 more potentially affected by CVE-2017-16137 via debug (>=0.1.0, <=2.6.8)

debug NPM version =0.1.0, =1.0.0, =0.0.15, =1.0.4, =1.0.1, =0.0.1, =1.0.3, =0.0.1, =0.1.0, =0.1.2 - 200 0.0.1 and more Source cves: CVE-2017-16137 Source advisory: MEND:CVE-2017-16137...