7371 matches found
MAL-2025-23920 Malicious code in js-regular (npm)
The package js-regular was found to contain malicious code...
MAL-2025-37581 Malicious code in uglify-js-google-rimraf-panspermia (npm)
The package uglify-js-google-rimraf-panspermia was found to contain malicious code...
on-duty-js (3.0.0), todo-app-23426 (1.0.0) potentially affected by unknown CVE via chalkk (0.0.1-security)
chalkk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chalkk and may be impacted: - on-duty-js 3.0.0 - todo-app-23426 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16776...
declarative-js (>=0.0.0, <=0.0.2) potentially affected by unknown CVE via join-params (0.0.0)
join-params NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on join-params and may be impacted: - declarative-js =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23839...
MAL-2025-7037 Malicious code in 911-js-test-example (npm)
The package 911-js-test-example was found to contain malicious code...
Malicious code in hease-js-api (npm)
The package hease-js-api was found to contain malicious code...
Malicious code in commander-js (npm)
The package commander-js was found to contain malicious code...
MAL-2025-23748 Malicious code in jetpack-js-tools (npm)
The package jetpack-js-tools was found to contain malicious code...
Malicious code in simple-js-sha3-256 (npm)
The package simple-js-sha3-256 was found to contain malicious code...
mycoin (1.0.0), simple-blockchain-implement (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via crytpo-js (0.0.1-security)
crytpo-js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crytpo-js and may be impacted: - mycoin 1.0.0 - simple-blockchain-implement =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17770...
declarative-js (>=0.0.0, <=0.0.2) potentially affected by unknown CVE via andthen (0.0.2)
andthen NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on andthen and may be impacted: - declarative-js =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14514...
Malicious code in js-shi3 (npm)
The package js-shi3 was found to contain malicious code...
Malicious code in js-shc3 (npm)
The package js-shc3 was found to contain malicious code...
Malicious code in dme2-js-client (npm)
The package dme2-js-client was found to contain malicious code...
MAL-2025-32908 Malicious code in seer-js (npm)
The package seer-js was found to contain malicious code...
Malicious code in string-magnetosphere-webdriver-mocha-uglify-js (npm)
The package string-magnetosphere-webdriver-mocha-uglify-js was found to contain malicious code...
Malicious code in module-draft-js-mention-plugin (npm)
The package module-draft-js-mention-plugin was found to contain malicious code...
Malicious code in decoherence-kinetic-kastra-uglify-js (npm)
The package decoherence-kinetic-kastra-uglify-js was found to contain malicious code...