declarative-js (>=0.0.0, <=0.0.2) potentially affected by unknown CVE via join-params (0.0.0)

join-params NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on join-params and may be impacted: - declarative-js =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23839...

Malicious code in hease-js-api (npm)

The package hease-js-api was found to contain malicious code...

Malicious code in simple-js-shake (npm)

The package simple-js-shake was found to contain malicious code...

Malicious code in js-sja3 (npm)

The package js-sja3 was found to contain malicious code...

Malicious code in js-mods (npm)

The package js-mods was found to contain malicious code...

Malicious code in rtc-js-sdk (npm)

The package rtc-js-sdk was found to contain malicious code...

Malicious code in decoherence-kinetic-kastra-uglify-js (npm)

The package decoherence-kinetic-kastra-uglify-js was found to contain malicious code...

Malicious code in js-regular (npm)

The package js-regular was found to contain malicious code...

Malicious code in rtc-js-demo (npm)

The package rtc-js-demo was found to contain malicious code...

Malicious code in yelp-js-infra (npm)

The package yelp-js-infra was found to contain malicious code...

Malicious code in simple-js-sha3 (npm)

The package simple-js-sha3 was found to contain malicious code...

Malicious code in string-magnetosphere-webdriver-mocha-uglify-js (npm)

The package string-magnetosphere-webdriver-mocha-uglify-js was found to contain malicious code...

Malicious code in commander-js (npm)

The package commander-js was found to contain malicious code...

MAL-2025-23748 Malicious code in jetpack-js-tools (npm)

The package jetpack-js-tools was found to contain malicious code...

MAL-2025-28485 Malicious code in orderly-js-sdk-nextjs-template (npm)

The package orderly-js-sdk-nextjs-template was found to contain malicious code...

MAL-2025-17212 Malicious code in cm-materialjs (npm)

The package cm-materialjs was found to contain malicious code...

Malicious code in simple-js-sha3-256 (npm)

The package simple-js-sha3-256 was found to contain malicious code...

Malicious code in dme2-js-client (npm)

The package dme2-js-client was found to contain malicious code...

mycoin (1.0.0), simple-blockchain-implement (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via crytpo-js (0.0.1-security)

crytpo-js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crytpo-js and may be impacted: - mycoin 1.0.0 - simple-blockchain-implement =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17770...

declarative-js (>=0.0.0, <=0.0.2) potentially affected by unknown CVE via andthen (0.0.2)

andthen NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on andthen and may be impacted: - declarative-js =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14514...