Malicious code in @zalastax/nolb-gulp-t (npm)

The package @zalastax/nolb-gulp-t was found to contain malicious code...

Malicious code in @zalastax/nolb-gulp-v (npm)

The package @zalastax/nolb-gulp-v was found to contain malicious code...

Malicious code in @zalastax/nolb-gulp-w (npm)

The package @zalastax/nolb-gulp-w was found to contain malicious code...

Malicious code in @zalastax/nolb-gulp-x (npm)

The package @zalastax/nolb-gulp-x was found to contain malicious code...

Malicious code in @zalastax/nolb-gulp-y (npm)

The package @zalastax/nolb-gulp-y was found to contain malicious code...

Malicious code in @zalastax/nolb-gulp_ (npm)

The package @zalastax/nolb-gulp was found to contain malicious code...

Malicious code in abiogenesis-cosmochemistry-palynology-gulp (npm)

The package abiogenesis-cosmochemistry-palynology-gulp was found to contain malicious code...

Malicious code in aquarius-async-prettier-gulp (npm)

The package aquarius-async-prettier-gulp was found to contain malicious code...

Malicious code in aws-gulp-tasks (npm)

The package aws-gulp-tasks was found to contain malicious code...

Malicious code in chalk-browserify-gulp-eventhoriz (npm)

The package chalk-browserify-gulp-eventhoriz was found to contain malicious code...

Malicious code in decoherence-gulp-primatology-tethys (npm)

The package decoherence-gulp-primatology-tethys was found to contain malicious code...

MAL-2025-22056 Malicious code in gulp-nts-uit-index-helper (npm)

The package gulp-nts-uit-index-helper was found to contain malicious code...

MAL-2025-6422 Malicious code in gulp-prestashop (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in gulp-prestashop (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2020-7607

gulp-styledocco through 0.0.3 allows execution of arbitrary commands. The argument 'options' of the exports function in 'index.js' can be controlled by users without any sanitization...

MAL-2024-1983 Malicious code in @store-sfdcbt-net/cicd_gulp-central-js-lib-v1 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @store-sfdcbt-net/cicd_gulp-central-js-lib-v1 (npm)

--- -= Per source details. Do not edit below this line.=-...

Researchers Uncover RAT-Dropping npm Package Targeting Gulp Users

Cybersecurity researchers have uncovered a new suspicious package uploaded to the npm package registry that's designed to drop a remote access trojan RAT on compromised systems. The package in question is glup-debugger-log, which targets users of the gulp toolkit by masquerading as a "logger for...

BIT-GULP-2020-28469 Regular Expression Denial of Service (ReDoS)

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator...

Malicious Package

Overview yasap-gulp-dev-tools is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...