MAL-2025-23220 Malicious code in info-sanitize-shell-omicron-thread (npm)

The package info-sanitize-shell-omicron-thread was found to contain malicious code...

CVE-2020-26245

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or...