EUVD-2025-178600

Malicious code in hash-char-new-alert-sandbox npm...

EUVD-2025-37078

Malicious code in epic-web-payment-management-sandbox npm...

Malicious code in sandbox-report-cat-orchestrate-orchestrate (npm)

The package sandbox-report-cat-orchestrate-orchestrate was found to contain malicious code...

Arbitrary Code Execution

Overview sandbox is a nifty javascript sandbox for node.js. Affected versions of this package are vulnerable to Arbitrary Code Execution through this.constructor.constructor. An attacker can execute arbitrary code in the system by evaluating payloads that have access to the main context, such as...