36 matches found
RCE (Remote Code Execution) @babel/plugin-transform-modules-systemjs Dependency in Jira Software Data Center
This High severity RCE Remote Code Execution vulnerability was introduced in versions 9.17.2, 10.0.0, 10.1.1, 10.3.20, and 11.3.8 of Jira Software Data Center. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H...
CVE-2026-44728
CVE-2026-44728 affects Babel, a JavaScript compiler. Vulnerability occurs when compiling code that is specifically crafted by an attacker, enabling output code to execute arbitrary code. Affects Babel versions 7.12.0 through before 7.29.4 and 8.0.0-alpha.13. Root cause is the generation of advers...
CVE-2026-44728 Improper Control of Generation of Code when compiling specifically crafted malicious code with @babel/plugin-transform-modules-systemjs
Babel is a compiler for writing next generation JavaScript. From 7.12.0 to before 7.29.4 and 8.0.0-alpha.13, using Babel to compile code that was specifically crafted by an attacker can cause Babel to generate output code that executes arbitrary code. This vulnerability is fixed in 7.29.4 and...
@achmadk/react-epic-spinner-css (>=0.0.1, <=0.0.3), @all-star/base (>=0.23.3, <=0.23.6) +310 more potentially affected by CVE-2026-44728 via @babel/plugin-transform-modules-systemjs (8.0.1)
@babel/plugin-transform-modules-systemjs NPM version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @babel/plugin-transform-modules-systemjs and may be impacted: - @achmadk/react-epic-spinner-css =0.0.1, =0.23.3, =0.23.3, =0.23.3, =0.23.3, =0.0....
@2kk/miniprogram-ci (>=0.0.2, <=0.0.8), @agilejs/cli (1.0.0) +332 more potentially affected by CVE-2026-44728 via @babel/plugin-transform-modules-systemjs (>=7.12.1, <=7.29.0)
@babel/plugin-transform-modules-systemjs NPM version =7.12.1, =0.0.2, =1.0.0, =7.21.4-esm.2, =2.1.0-alpha.0, =2.1.0-alpha.0, =2.1.0-alpha.0, =2.1.0-alpha.74, =1.0.0, =1.1.5 and more Source cves: CVE-2026-44728 Source advisory: SNYK:JS-BABELPLUGINTRANSFORMMODULESSYSTEMJS-16624576...
@2kk/miniprogram-ci (>=0.0.2, <=0.0.8), @agilejs/cli (1.0.0) +332 more potentially affected by CVE-2026-44728 via @babel/plugin-transform-modules-systemjs (>=7.12.1, <=7.29.0)
@babel/plugin-transform-modules-systemjs NPM version =7.12.1, =0.0.2, =1.0.0, =7.21.4-esm.2, =2.1.0-alpha.0, =2.1.0-alpha.0, =2.1.0-alpha.0, =2.1.0-alpha.74, =1.0.0, =1.1.5 and more Source cves: CVE-2026-44728 Source advisory: OSV:GHSA-FV7C-FP4J-7GWP...
EUVD-2025-112738
Malicious code in html-webpack-plugin-transform-google-transport npm...
EUVD-2025-113864
Malicious code in eslint-plugin-transform-semantic-ui-yakutsk npm...
MAL-2024-10695 Malicious code in babel-plugin-transform-vuex-analysis (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 661cbd3eaaae7ee5bb113192279e6ba2e72c5c5363fe668209893a70debd3248 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in babel-plugin-transform-vuex-analysis (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 661cbd3eaaae7ee5bb113192279e6ba2e72c5c5363fe668209893a70debd3248 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9771 Malicious code in plugin-transform-unicode-sets-regex (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in plugin-transform-optional-chaining (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in plugin-transform-object-rest-spread (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in plugin-transform-numeric-separator (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9765 Malicious code in plugin-transform-numeric-separator (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in plugin-transform-logical-assignment-operators (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in plugin-transform-export-namespace-from (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in plugin-transform-class-static-block (npm)
--- -= Per source details. Do not edit below this line.=-...