11 matches found
@nk-spirit/nk-ngx-bootstrap (7.1.16) potentially affected by CVE-2026-101895 via @angular/platform-server (11.2.0)
@angular/platform-server NPM version 11.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - @nk-spirit/nk-ngx-bootstrap 7.1.16 Source cves: CVE-2026-101895 Source advisory: MEND:CVE-2026-101895...
WS-2018-0673
ngx-bootstrap - XSS issue in typeahead component...
4science_ng-dynamic-forms (>=19.0.0, <=19.0.3), @adirh105/rc-packages (1.0.0) +880 more potentially affected by unknown CVE via ngx-bootstrap (>=1.6.6, <=11.0.2)
ngx-bootstrap NPM version =1.6.6, =19.0.0, =1.0.5-3.1, =0.0.0, =1.0.0, =0.3.28, =0.2.82, =0.0.186, =1.31.0-SNAPSHOT, =0.0.5, =0.0.10, =0.0.10, =1.0.2, =1.0.0, =1.0.194-beta.10 and more Source cves: unknown CVE Source advisory: MEND:WS-2018-0673...
Malware in @rxap/ngx-bootstrap
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-47455 Malicious code in @rxap/ngx-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e41d94f6e5c522d3783037ae1e8e338ce291027d01211c6c990a0f3a6d8c08bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @rxap/ngx-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e41d94f6e5c522d3783037ae1e8e338ce291027d01211c6c990a0f3a6d8c08bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Embedded Malicious Code
Overview ngx-bootstrap is a package that contains all core Bootstrap components powered by Angular. Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a postinstall script called bundle.js that exfiltrates secrets from the...
Malware in ngx-bootstrap
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in ngx-bootstrap (npm)
The package ngx-bootstrap was found have been identified as potentially malicious due to the inclusion of a minified postinstall script. It is considered suspicious because: The script appears to attempt to steal access tokens for npm, GitHub, AWS, GCP, etc. There is no changelog or new tags in t...
MAL-2025-47197 Malicious code in ngx-bootstrap (npm)
The package ngx-bootstrap was found have been identified as potentially malicious due to the inclusion of a minified postinstall script. It is considered suspicious because: The script appears to attempt to steal access tokens for npm, GitHub, AWS, GCP, etc. There is no changelog or new tags in t...
