Malicious Package

Overview @validate-ethereum-address/core is a malicious package. This package contains malicious code, and its content was not yet removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizatio...

Malicious code in elf-stats-sleighing-hammer-902 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b59e6f3e736d07e9305a2c51519d0635a8c24eca451d83955f59221c5f5fb29 The package elf-stats-sleighing-hammer-902 was found to contain malicious code...

MAL-2025-1956 Malicious code in web-attendant (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1822 Malicious code in google-internal (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1801 Malicious code in epicagames-database (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1727 Malicious code in apple-admin (npm)

--- -= Per source details. Do not edit below this line.=-...

ROS-20230616-08

The npm package manager vulnerability is related to the npm package ignoring the file exclusion directives .gitignore and .npmignore root-level file exclusions when run in a workspace or with the workspace flag e.g., --workspaces, --workspace=. Exploitation of the vulnerability could allow an...

ROS-20230616-01

The npm package manager vulnerability is related to the npm package ignoring the file exclusion directives .gitignore and .npmignore root-level file exclusions when run in a workspace or with the workspace flag e.g., --workspaces, --workspace=. Exploitation of the vulnerability could allow an...

Vulnerability of the `exec` function in the gulp-scss-lint package from the NPM package manager, allowing attackers to execute arbitrary commands.

The vulnerability of the exec function in the src/command.js file of the gulp-scss-lint package exists because measures to eliminate special elements used in operating system commands have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2019-1104 · Npm +6 · Npm Cli +6

Name of the Vulnerable Software and Affected Versions: npm CLI versions prior to 6.13.4 Description: The issue allows for an Arbitrary File Overwrite due to the failure to prevent existing globally-installed binaries from being overwritten by other package installations. For example, if a package...

[SECURITY] Fedora 19 Update: npm-1.3.3-1.fc19

npm is a package manager for node.js. You can use it to install and publish your node programs. It manages dependencies and does other cool stuff...