Malicious code in uswds-gulp (npm)

The package uswds-gulp was found to contain malicious code...

Malicious code in @zalastax/nolb-gulp-6 (npm)

The package @zalastax/nolb-gulp-6 was found to contain malicious code...

Malicious code in @zalastax/nolb-gulp-d (npm)

The package @zalastax/nolb-gulp-d was found to contain malicious code...

Malicious code in @zalastax/nolb-gulp-o (npm)

The package @zalastax/nolb-gulp-o was found to contain malicious code...

Malicious code in gulp-prestashop (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6422 Malicious code in gulp-prestashop (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2020-7607

gulp-styledocco through 0.0.3 allows execution of arbitrary commands. The argument 'options' of the exports function in 'index.js' can be controlled by users without any sanitization...

anima-pull2load (>=1.0.1 <=1.0.3), bem-register (>=1.0.0 <=1.0.5) +11 more potentially affected by CVE-2024-51091 via seajs (>=1.2.1 <=2.2.1)

seajs NPM version =1.2.1, =1.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.1, =0.0.1, =1.0.7, =0.9.11, =1.1.0, =1.1.3 Source cves: CVE-2024-51091 Source advisory: OSV:GHSA-PFR4-4397-3HG8...

MAL-2024-1983 Malicious code in @store-sfdcbt-net/cicd_gulp-central-js-lib-v1 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @store-sfdcbt-net/cicd_gulp-central-js-lib-v1 (npm)

--- -= Per source details. Do not edit below this line.=-...

Researchers Uncover RAT-Dropping npm Package Targeting Gulp Users

Cybersecurity researchers have uncovered a new suspicious package uploaded to the npm package registry that's designed to drop a remote access trojan RAT on compromised systems. The package in question is glup-debugger-log, which targets users of the gulp toolkit by masquerading as a "logger for...

BIT-GULP-2020-28469 Regular Expression Denial of Service (ReDoS)

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

Malicious Package

Overview yasap-gulp-dev-tools is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview yasap-gulp-tools is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious code in node-gulp-tanker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33ba0914556ace991c561a50648a0153d6d2ff3dd2b53ca1ada0b870f9cd8c4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-630 Malicious code in node-gulp-tanker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33ba0914556ace991c561a50648a0153d6d2ff3dd2b53ca1ada0b870f9cd8c4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gulp-lpoada-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 530fe83bcfab48f3befbe4c33fcdbaaf1ea0eb6f27cd220d060424e3e5b62b5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3505 Malicious code in gulp-elsint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a663e5efe598403dc8a9b515674d048b8300441199b7e2e016ddf99c8cc72eab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gulp-filste5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f3f3ec04afdc528ac36fcf80ea3c30bb0d03ac99516cfe0d451b42124a3951b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3501 Malicious code in gulp--topreftixer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab70f94054657a22b66857d561db4bd6cb36b38ea4bbba94a5d5e26c823df38f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...