Malicious code in set-cookie-ease (npm)

Source: amazon-inspector b2bf656ba38b4d951239ee29799f510de4a8cb93fcf5d8005db4cd679a8631e6 Package masquerades as js-cookie same banner /! js-cookie v3.0.5 | MIT /, README, and repository.url: git://github.com/js-cookie/js-cookie.git but diverges in dist/cookie.ease.js. At lines 46-49, the...

cookie-parser-es (>=1.0.7, <=1.0.8) potentially affected by unknown CVE via set-cookie-ease (1.1.5)

set-cookie-ease NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on set-cookie-ease and may be impacted: - cookie-parser-es =1.0.7, =1.0.8 Source cves: unknown CVE Source advisory: GHSA-9CVH-X7WF-82V8...

cookie-parser-es (>=1.0.7, <=1.0.8) potentially affected by unknown CVE via set-cookie-ease (1.1.5)

set-cookie-ease NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on set-cookie-ease and may be impacted: - cookie-parser-es =1.0.7, =1.0.8 Source cves: unknown CVE Source advisory: OSV:MAL-2026-6500...