PT-2026-55690

Root has patched GHSA-64g7-mvw6-v9qj in the @rootio/shelljs package for Root:npm. Multiple fixed versions available...

EUVD-2025-176400

Malicious code in shelljs-package-writable-jabbah npm...

MAL-2025-189475 Malicious code in shelljs-package-writable-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f60830a143e445f6febb17ec8af079069f1883139d63dfad0461f1d08e9008a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123121

Malicious code in publish-pipe-antares-shelljs npm...

EUVD-2025-123109

Malicious code in publish-shelljs-hexo-css-loader npm...

Malicious code in greatfilter-ablation-phoenix-shelljs (npm)

The package greatfilter-ablation-phoenix-shelljs was found to contain malicious code...

MAL-2025-14782 Malicious code in archaeogenetics-deimos-avior-shelljs (npm)

The package archaeogenetics-deimos-avior-shelljs was found to contain malicious code...