19 matches found
Malicious Package
Overview gloggo is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the gloggo...
express-helmet (1.0.1), gloglet (2.3.4) +1 more potentially affected by unknown CVE via gloggo (1.1.4)
gloggo NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - express-helmet 1.0.1 - gloglet 2.3.4 - helmify 1.2.1 Source cves: unknown CVE Source advisory: SNYK:JS-GLOGGO-19653625...
gloglet (2.3.2) potentially affected by unknown CVE via gloggo (1.1.2)
gloggo NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - gloglet 2.3.2 Source cves: unknown CVE Source advisory: SNYK:JS-GLOGGO-19653625...
express-helmet (1.0.1), gloggo (>=1.1.2, <=1.1.4) +2 more potentially affected by unknown CVE via file-type-detector (1.1.1)
file-type-detector NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on file-type-detector and may be impacted: - express-helmet 1.0.1 - gloggo =1.1.2, =2.3.2, =2.3.4 - helmify 1.2.1 Source cves: unknown CVE Source advisory:...
gloglet (2.3.3) potentially affected by unknown CVE via gloggo (1.1.3)
gloggo NPM version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - gloglet 2.3.3 Source cves: unknown CVE Source advisory: SNYK:JS-GLOGGO-19653625...
Malicious code in sonmors (npm)
Source: amazon-inspector 66e21634e32b7d24357ad667703da4ddeb42542ed9fc6a3ed28c7257d2e27fca Package sonmors ships a near-copy of the sonner React toast library and spoofs sonner's identity in package.json author Emil Kowalski , homepage sonner.emilkowal.ski, repository github.com/emilkowalski/sonne...
express-helmet (1.0.1), gloggo (>=1.1.2, <=1.1.4) +2 more potentially affected by unknown CVE via file-type-detector (1.1.1)
file-type-detector NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on file-type-detector and may be impacted: - express-helmet 1.0.1 - gloggo =1.1.2, =2.3.2, =2.3.4 - helmify 1.2.1 Source cves: unknown CVE Source advisory:...
Malicious code in gloggo (npm)
Source: amazon-inspector a333f8ded17af0754357d938933ee95e9ab1f857cc875948d49cb9b26992e75d gloggo impersonates the legitimate gulpjs 'glogg' logging library by copying its README, shields, and LICENSE text attributed to Blaine Bublitz, while package.json attributes authorship to 'Blockvora Team '...
gloglet (2.3.2) potentially affected by unknown CVE via gloggo (1.1.2)
gloggo NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - gloglet 2.3.2 Source cves: unknown CVE Source advisory: GHSA-WMGG-555M-P7H6...
express-helmet (1.0.1), gloglet (2.3.4) +1 more potentially affected by unknown CVE via gloggo (1.1.4)
gloggo NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - express-helmet 1.0.1 - gloglet 2.3.4 - helmify 1.2.1 Source cves: unknown CVE Source advisory: GHSA-WMGG-555M-P7H6...
gloglet (2.3.3) potentially affected by unknown CVE via gloggo (1.1.3)
gloggo NPM version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - gloglet 2.3.3 Source cves: unknown CVE Source advisory: GHSA-WMGG-555M-P7H6...
MAL-2026-16053 Malicious code in file-type-detector (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04917bd7fc156dcb9793cb1f1d06ed0f2d0cb1b3aa4b04431dea54ed71f6be72 A clone of file-type-checker with one function added: isSignname, moduleName, offset in dist/validation/image.js reads public/$name.png from the...
Malicious code in gloggo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a333f8ded17af0754357d938933ee95e9ab1f857cc875948d49cb9b26992e75d gloggo impersonates the legitimate gulpjs 'glogg' logging library by copying its README, shields, and LICENSE text attributed to Blaine Bublitz, whil...
MAL-2026-16054 Malicious code in gloggo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a333f8ded17af0754357d938933ee95e9ab1f857cc875948d49cb9b26992e75d gloggo impersonates the legitimate gulpjs 'glogg' logging library by copying its README, shields, and LICENSE text attributed to Blaine Bublitz, whil...
express-helmet (1.0.1), gloglet (2.3.4) +1 more potentially affected by unknown CVE via gloggo (1.1.4)
gloggo NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - express-helmet 1.0.1 - gloglet 2.3.4 - helmify 1.2.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-16054...
gloglet (2.3.2) potentially affected by unknown CVE via gloggo (1.1.2)
gloggo NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - gloglet 2.3.2 Source cves: unknown CVE Source advisory: OSV:MAL-2026-16054...
gloglet (2.3.3) potentially affected by unknown CVE via gloggo (1.1.3)
gloggo NPM version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - gloglet 2.3.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-16054...
MAL-2026-16055 Malicious code in sonmors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e21634e32b7d24357ad667703da4ddeb42542ed9fc6a3ed28c7257d2e27fca Package sonmors ships a near-copy of the sonner React toast library and spoofs sonner's identity in package.json author Emil Kowalski , homepage...
Malicious code in sonmors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e21634e32b7d24357ad667703da4ddeb42542ed9fc6a3ed28c7257d2e27fca Package sonmors ships a near-copy of the sonner React toast library and spoofs sonner's identity in package.json author Emil Kowalski , homepage...