MAL-2025-26232 Malicious code in metalsmith-grus-less-loader-gridsome (npm)

The package metalsmith-grus-less-loader-gridsome was found to contain malicious code...

MAL-2025-25409 Malicious code in lint-staged-ceres-metalsmith-non-blocking (npm)

The package lint-staged-ceres-metalsmith-non-blocking was found to contain malicious code...

MAL-2025-17404 Malicious code in command-module-zenobia-metalsmith (npm)

The package command-module-zenobia-metalsmith was found to contain malicious code...

MAL-2025-22388 Malicious code in hercules-build-metalsmith-graviton (npm)

The package hercules-build-metalsmith-graviton was found to contain malicious code...

MAL-2025-26234 Malicious code in metalsmith-sociobiology-steganography-cluster (npm)

The package metalsmith-sociobiology-steganography-cluster was found to contain malicious code...

Malicious code in metalsmith-janus-javascript-transport (npm)

The package metalsmith-janus-javascript-transport was found to contain malicious code...

Malicious code in hercules-build-metalsmith-graviton (npm)

The package hercules-build-metalsmith-graviton was found to contain malicious code...

MAL-2025-17002 Malicious code in chromedriver-metalsmith-arcturus-stop (npm)

The package chromedriver-metalsmith-arcturus-stop was found to contain malicious code...

MAL-2025-20795 Malicious code in fornax-express-package-metalsmith (npm)

The package fornax-express-package-metalsmith was found to contain malicious code...

MAL-2025-26233 Malicious code in metalsmith-janus-javascript-transport (npm)

The package metalsmith-janus-javascript-transport was found to contain malicious code...

Malicious code in dorado-metalsmith-heka-commitlint-config-angular (npm)

The package dorado-metalsmith-heka-commitlint-config-angular was found to contain malicious code...

Malicious code in metalsmith-grus-less-loader-gridsome (npm)

The package metalsmith-grus-less-loader-gridsome was found to contain malicious code...

MAL-2025-25245 Malicious code in library-metalsmith-apollo-protractor (npm)

The package library-metalsmith-apollo-protractor was found to contain malicious code...

MAL-2025-27289 Malicious code in neptune-meteor-oscillation-metalsmith (npm)

The package neptune-meteor-oscillation-metalsmith was found to contain malicious code...

MAL-2025-18460 Malicious code in dione-metalsmith-magnetosphere-dendrochronology (npm)

The package dione-metalsmith-magnetosphere-dendrochronology was found to contain malicious code...

docpress (>=0.1.0 <=0.5.5), metalsmith-start (>=0.6.0 <=1.3.4) +1 more potentially affected by CVE-2021-3189 via slashify (>=0.1.0 <=1.0.0)

slashify NPM version =0.1.0, =0.1.0, =0.6.0, =0.13.3, =1.2.3 Source cves: CVE-2021-3189 Source advisory: OSV:GHSA-F4HQ-453J-P95F...