GHSA-G8F2-4F4F-5JQW SandboxJS has a sandbox escape via Function.caller leakage of internal call op

Summary Sandbox-defined functions expose Function.caller, allowing sandboxed code to recover the internal LispType.Call runtime callback. That callback can then be invoked with attacker-controlled fake context and obj values to extract blocked host statics, recover the real host Function...

Malicious code in internal-runtime-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-48847 Malicious code in internal-runtime-test (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in internal-runtime (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-48846 Malicious code in internal-runtime (npm)

--- -= Per source details. Do not edit below this line.=-...