EUVD-2022-1375

Malicious code in bioql PyPI...

notevil 注入漏洞

notevil is an open source npm package. notevil suffers from an injection vulnerability that stems from a failure to restrict access to the main context, which allows an attacker to add or modify the prototype of an object. It is susceptible to sandbox escapes, which can lead to prototype...