MAL-2025-32954 Malicious code in sentry-sdk-browser-extension (npm)

The package sentry-sdk-browser-extension was found to contain malicious code...

Prototype Pollution

@sentry/browser is vulnerable to Prototype Pollution. The vulnerability is due to inadequate checks on user input or unsafe handling of data within an application when data is not properly validated or sanitized. It allows attackers to manipulate the prototype of objects, leading to potential...

-temp-electron-manager-somiibo (=0.0.200), 360sentry (>=1.0.0 <=1.0.4) +1709 more potentially affected by unknown CVE via @sentry/browser (>=0.1.0 <=7.119.0)

@sentry/browser NPM version =0.1.0, =1.0.0, =0.0.4, =0.65.0, =0.17.0, =0.53.0, =0.53.0, =0.16.0, =0.49.0, =0.40.0, =0.53.0, =0.16.0, =0.16.0, =0.53.0, =0.79.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-593M-55HH-J8GV...

@gambalabs/sentry-nuxt (>=8.31.1 <=8.32.0), @globalbrain/sefirot (=3.40.0) +26 more potentially affected by unknown CVE via @sentry/browser (>=8.0.0-alpha.2 <=8.32.0)

@sentry/browser NPM version =8.0.0-alpha.2, =8.31.1, =8.9.0, =1.0.386-leo-ron-885-experimental.35, =0.0.1, =0.1.0, =8.0.0, =8.0.0-alpha.2, =8.0.0, =1.0.0, =5.0.0, =8.0.0, =8.0.0, =8.0.0, =8.32.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-593M-55HH-J8GV...