Malicious code in leveldb-edit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54266582f63ea6cce2dd300034c1025dc0eb81a2ffed523a98fdeb481729d746 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @openyard/vetcode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b52edf9b7cb501d1e1b2e8c336a029eebef238e51c881739d100adde9516d5b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

npm ansi_up v4 - Cross-Site Scripting

npm package ansiup v4 is vulnerable to cross-site scripting because ANSI escape codes can be used to create HTML hyperlinks. id: CVE-2021-3377 info: name: npm ansiup v4 - Cross-Site Scripting author: geeknik severity: medium description: npm package ansiup v4 is vulnerable to cross-site scripting...

Netmask NPM Package - Server-Side Request Forgery

Netmask NPM Package is susceptible to server-side request forgery because of improper input validation of octal strings in netmask npm package. This allows unauthenticated remote attackers to perform indeterminate SSRF, remote file inclusion, and local file inclusion attacks on many of the...

stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

Malicious code in @bestcoolman/dev-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af28ace408ef7f1cb36a4486816b589867dd20b65c437525c3dbbada455c2213 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in charape (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 642f1d05c7f56e4648be237af99c1dc703e0dd7d829cb398379f01de3e2f3385 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17392 Malicious code in focashi (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17414 Malicious code in yonzofficial (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-18787 Malicious code in @chatbridgeworld/baileys (npm)

Malicious package. @chatbridgeworld/baileys is a trojanized fork of the Baileys WhatsApp library @whiskeysockets/baileys. on connection it issues an authenticated w:mex newsletter FOLLOW mutation queryid 7871414976211147 that silently subscribes every victim to attacker-controlled WhatsApp channe...

Malicious code in @chatbridgeworld/baileys (npm)

Malicious package. @chatbridgeworld/baileys is a trojanized fork of the Baileys WhatsApp library @whiskeysockets/baileys. on connection it issues an authenticated w:mex newsletter FOLLOW mutation queryid 7871414976211147 that silently subscribes every victim to attacker-controlled WhatsApp channe...

ROOT-APP-NPM-CVE-2026-83607 CVE-2026-83607 in @xmldom/xmldom - Patched by Root

Root has patched CVE-2026-83607 in the @xmldom/xmldom package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-83614 CVE-2026-83614 in @xmldom/xmldom - Patched by Root

Root has patched CVE-2026-83614 in the @xmldom/xmldom package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-83605 CVE-2026-83605 in @xmldom/xmldom - Patched by Root

Root has patched CVE-2026-83605 in the @xmldom/xmldom package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-41672 CVE-2026-41672 in @xmldom/xmldom - Patched by Root

Root has patched CVE-2026-41672 in the @xmldom/xmldom package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-83615 CVE-2026-83615 in @xmldom/xmldom - Patched by Root

Root has patched CVE-2026-83615 in the @xmldom/xmldom package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-41674 CVE-2026-41674 in @xmldom/xmldom - Patched by Root

Root has patched CVE-2026-41674 in the @xmldom/xmldom package for Root:npm. Multiple fixed versions available...

Malicious code in u-chan-secrets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 619be2223fd3495f02e8056622d411dab9e8dc8d08891620734f7a6a8b9fb568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18777 Malicious code in u-chan-secrets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 619be2223fd3495f02e8056622d411dab9e8dc8d08891620734f7a6a8b9fb568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-123569

The devalue package for npm before 5.6.3 can consume excessive CPU and memory when serializing sparse arrays with uneval or stringify. An attacker who manages to get a sparse array created on the server, which mainstream wire formats do not allow, and serialized there can cause a denial of servic...