4636 matches found
Malicious code in terser-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b13d0221d659ecaf83a068e06b73cafff9906fc1309c767b1ddcf6c3a0aef92 The package terser-js was found to contain malicious code. Source: ghsa-malware 4bd9337c93fbe1be40c4067d9cc928e52cfcd64b2085051e382cf062548f5a8e Any...
Malicious code in body-parser-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d1cf0401e8f508430b1d43b7fd16e5f0d2cf1e17ea7388b651ac0466d141db The package body-parser-js was found to contain malicious code. Source: ghsa-malware 1ce45487b7b908b88575fd497e5e1ee4d106c3e361fc36768c37937d4235ffd1...
MAL-2026-206 Malicious code in terser-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b13d0221d659ecaf83a068e06b73cafff9906fc1309c767b1ddcf6c3a0aef92 The package terser-js was found to contain malicious code. Source: ghsa-malware 4bd9337c93fbe1be40c4067d9cc928e52cfcd64b2085051e382cf062548f5a8e Any...
Malicious Package
Overview terser-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
EUVD-2026-1994
Malicious code in rxjs-js npm...
EUVD-2026-1990
Malicious code in pako-js npm...
Malicious code in yargs-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376960ce1e5da7d01dd733e2ab53f7c0b614b4f98bf23da45b88c2bf3f169037 The package yargs-js was found to contain malicious code. Source: ghsa-malware f0f6199e2f9202a8ae9ecbd9363eb1b1f2d56b7ab11d600b01dd0bc1adcb31c6 Any...
EUVD-2026-1992
Malicious code in yargs-js npm...
Malicious Package
Overview pako-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious Package
Overview yargs-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
MAL-2026-204 Malicious code in pako-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b50aeb49929f8ce8f402d5ac0c09ee4735bc5411a45ae75dc357bfc5d18506d The package pako-js was found to contain malicious code. Source: ghsa-malware 86a948a3458aac938e35fbf5ec50b54986362543bef11c481af0f1dd3292cafd Any...
Malicious Package
Overview rxjs-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
EUVD-2026-1991
Malicious code in body-parser-js npm...
MAL-2026-203 Malicious code in body-parser-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d1cf0401e8f508430b1d43b7fd16e5f0d2cf1e17ea7388b651ac0466d141db The package body-parser-js was found to contain malicious code. Source: ghsa-malware 1ce45487b7b908b88575fd497e5e1ee4d106c3e361fc36768c37937d4235ffd1...
MAL-2026-205 Malicious code in rxjs-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a82756fe99cd57d9fc69d12a33d81146a6d0c78b3afa5926fa2531e1b3ced4eb The package rxjs-js was found to contain malicious code. Source: ghsa-malware b3538568871fe17ed55bb2e7a707cf1ca517f047348a754b2be9ec8798ab2997 Any...
MAL-2026-207 Malicious code in yargs-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376960ce1e5da7d01dd733e2ab53f7c0b614b4f98bf23da45b88c2bf3f169037 The package yargs-js was found to contain malicious code. Source: ghsa-malware f0f6199e2f9202a8ae9ecbd9363eb1b1f2d56b7ab11d600b01dd0bc1adcb31c6 Any...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 React2Shell Vulnerability Analysis Lab This...
CVE-2026-22594 Ghost has Staff 2FA bypass
Ghost is a Node.js content management system. In versions 5.105.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in Ghost's 2FA mechanism allows staff users to skip email 2FA. This issue has been patched in versions 5.130.6 and 6.11.0...
