7 matches found
Malicious code in internal-runtime (npm)
--- Credit: OpenSSF source...
Malicious code in internal-runtime-test (npm)
--- Credit: OpenSSF source...
GHSA-G8F2-4F4F-5JQW SandboxJS has a sandbox escape via Function.caller leakage of internal call op
Summary Sandbox-defined functions expose Function.caller, allowing sandboxed code to recover the internal LispType.Call runtime callback. That callback can then be invoked with attacker-controlled fake context and obj values to extract blocked host statics, recover the real host Function...
Malicious code in internal-runtime-test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48847 Malicious code in internal-runtime-test (npm)
--- -= Per source details. Do not edit below this line.=-...