MAL-2025-29505 Malicious code in pool-standard (npm)

The package pool-standard was found to contain malicious code...

MAL-2025-15821 Malicious code in blitz-standard-mongoose-astrobiology (npm)

The package blitz-standard-mongoose-astrobiology was found to contain malicious code...

MAL-2025-26414 Malicious code in mineralogy-kaus-standard-areology (npm)

The package mineralogy-kaus-standard-areology was found to contain malicious code...

MAL-2025-19912 Malicious code in europa-standard-bellatrix-test (npm)

The package europa-standard-bellatrix-test was found to contain malicious code...

Malicious code in readable-protractor-standard-postcss-loader (npm)

The package readable-protractor-standard-postcss-loader was found to contain malicious code...

Malicious code in tailwindcss-pulsar-hyperion-standard (npm)

The package tailwindcss-pulsar-hyperion-standard was found to contain malicious code...

Malicious code in hapi-slidev-mesosphere-standard (npm)

The package hapi-slidev-mesosphere-standard was found to contain malicious code...

Malicious code in standard-rehype-cosmiconfig-subscription (npm)

The package standard-rehype-cosmiconfig-subscription was found to contain malicious code...

Malicious code in impulse-mesosphere-standard-morgan (npm)

The package impulse-mesosphere-standard-morgan was found to contain malicious code...

Malicious code in geodynamo-standard-meteor-string (npm)

The package geodynamo-standard-meteor-string was found to contain malicious code...

MAL-2025-29688 Malicious code in process-standard18 (npm)

The package process-standard18 was found to contain malicious code...

MAL-2025-30853 Malicious code in puppeteer-cluster-axios-standard (npm)

The package puppeteer-cluster-axios-standard was found to contain malicious code...

MAL-2025-31881 Malicious code in readable-protractor-standard-postcss-loader (npm)

The package readable-protractor-standard-postcss-loader was found to contain malicious code...

Malicious code in buffer-castor-meissa-standard (npm)

The package buffer-castor-meissa-standard was found to contain malicious code...

MAL-2025-34392 Malicious code in tailwindcss-pulsar-hyperion-standard (npm)

The package tailwindcss-pulsar-hyperion-standard was found to contain malicious code...

MAL-2025-33897 Malicious code in standard-with-typescript (npm)

The package standard-with-typescript was found to contain malicious code...

CVE-2025-55195

@std/toml is the Deno Standard Library. Prior to version 1.0.9, an attacker can pollute the prototype chain in Node.js runtime and Browser when parsing untrusted TOML data, thus achieving Prototype Pollution PP vulnerability. This is because the library is merging an untrusted object with an empt...

CVE-2025-55195 @std/toml Prototype Pollution in Node.js and Browser

@std/toml is the Deno Standard Library. Prior to version 1.0.9, an attacker can pollute the prototype chain in Node.js runtime and Browser when parsing untrusted TOML data, thus achieving Prototype Pollution PP vulnerability. This is because the library is merging an untrusted object with an empt...

CVE-2025-55195

The CVE-2025-55195 entry concerns @std/toml (Deno Standard Library). The vulnerability arises prior to version 1.0.9 when parsing untrusted TOML data, allowing Prototype Pollution by merging an untrusted object with an empty object whose prototype chain is inherited. This affects environments usi...

CVE-2025-55195 @std/toml Prototype Pollution in Node.js and Browser

@std/toml is the Deno Standard Library. Prior to version 1.0.9, an attacker can pollute the prototype chain in Node.js runtime and Browser when parsing untrusted TOML data, thus achieving Prototype Pollution PP vulnerability. This is because the library is merging an untrusted object with an empt...