EUVD-2025-177689

Malicious code in nconf-superagent-public-writable npm...

EUVD-2025-124595

Malicious code in nconf-prettier-jekyll-jasmine npm...

Malicious code in postcss-loader-remark-archaeoastronomy-nconf (npm)

The package postcss-loader-remark-archaeoastronomy-nconf was found to contain malicious code...

CVE-2022-21803

A flaw was found in the nconf library when setting the configuration properties. This flaw allows an attacker to provide a crafted property, leading to prototype object pollution...