89 matches found
EUVD-2025-37206
Malicious code in dynamic-import-node npm...
Malicious code in dynamic-import-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security e6f301178847664c047f34b5ce64b443f6162b3a0c5113fed22a3a9d1bfcd793 This package installs a dependency hosted on a custom domain that runs an info stealer during installation. The info stealer focuses on...
MAL-2025-49100 Malicious code in dynamic-import-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security e6f301178847664c047f34b5ce64b443f6162b3a0c5113fed22a3a9d1bfcd793 This package installs a dependency hosted on a custom domain that runs an info stealer during installation. The info stealer focuses on...
EUVD-2025-36765
Malicious code in syntax-dynamic-import npm...
Malicious code in syntax-dynamic-import (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fec79d7a70cef5393761c1bf6598e27804e363c0873d62590fe06b49d3bfc4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview syntax-dynamic-import is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-49046 Malicious code in syntax-dynamic-import (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fec79d7a70cef5393761c1bf6598e27804e363c0873d62590fe06b49d3bfc4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2023-2255
Malicious code in bioql PyPI...
Service workers could reveal script base URL due to dynamic `import()`. This vulnerability affects Firefox < 113.
...
Malicious code in dynamic-import-webpack (npm)
The package dynamic-import-webpack was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 6f9cf66ec7ebae846d89e7ce18fbdb1318e4cd99bf61c0e719bd78ce8c6aabe1 This package installs a dependency hosted on a custom domain that...
MAL-2025-19031 Malicious code in dynamic-import-webpack (npm)
The package dynamic-import-webpack was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 6f9cf66ec7ebae846d89e7ce18fbdb1318e4cd99bf61c0e719bd78ce8c6aabe1 This package installs a dependency hosted on a custom domain that...
SUSE CVE-2023-32208
Service workers could reveal script base URL due to dynamic import. This vulnerability affects Firefox 113...
CVE-2023-32208
Service workers could reveal script base URL due to dynamic import. This vulnerability affects Firefox 113...
CVE-2021-32619
Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. In Deno versions 1.5.0 to 1.10.1, modules that are dynamically imported through import or new Worker might have been able to bypass network and file system permission checks when statically importing other modules...
The vulnerability of the dynamicImport() function in the lilconfig configuration tool allows a hacker to execute arbitrary code.
The vulnerability of the dynamicImport function in the lilconfig configuration tool is related to improper handling of code generation when processing the.d.ts syntax. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
SUSE CVE-2024-21537
Versions of the package lilconfig from 3.1.0 and before 3.1.1 are vulnerable to Arbitrary Code Execution due to the insecure usage of eval in the dynamicImport function. An attacker can exploit this vulnerability by passing a malicious input through the defaultLoaders function...
CVE-2024-21537
Versions of the package lilconfig from 3.1.0 and before 3.1.1 are vulnerable to Arbitrary Code Execution due to the insecure usage of eval in the dynamicImport function. An attacker can exploit this vulnerability by passing a malicious input through the defaultLoaders function...
Lilconfig 安全漏洞
Lilconfig is a nodejs configuration finder by the individual developer Anton Kastritskii. A security vulnerability exists in Lilconfig version 3.1.0 up to and including version 3.1.1, which stems from the unsafe use of eval in the dynamicImport function. An attacker can exploit the vulnerability ...