Malicious Package

Overview npm-sandbox-research-d7e8 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2025-178600

Malicious code in hash-char-new-alert-sandbox npm...

EUVD-2025-37078

Malicious code in epic-web-payment-management-sandbox npm...

Malicious code in sandbox-report-cat-orchestrate-orchestrate (npm)

The package sandbox-report-cat-orchestrate-orchestrate was found to contain malicious code...

Arbitrary Code Execution

Overview sandbox is a nifty javascript sandbox for node.js. Affected versions of this package are vulnerable to Arbitrary Code Execution through this.constructor.constructor. An attacker can execute arbitrary code in the system by evaluating payloads that have access to the main context, such as...