@alv-ch/alv-styleguide (>=0.0.1-1.alpha, <=0.1.8), @alv-ch/cms-styleguide (>=0.0.1, <=1.0.1) potentially affected by unknown CVE via smartbanner.js (1.7.0)

smartbanner.js NPM version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on smartbanner.js and may be impacted: - @alv-ch/alv-styleguide =0.0.1-1.alpha, =0.0.1, =1.0.1 Source cves: unknown CVE Source advisory: MEND:WS-2019-0361...

@aconex/styleguide (>=2.0.1, <=2.2.0), alinex-report (>=1.0.2, <=1.3.14) potentially affected by unknown CVE via markdown-it-toc-and-anchor (>=2.0.0, <=4.1.2)

markdown-it-toc-and-anchor NPM version =2.0.0, =2.0.1, =1.0.2, =1.3.14 Source cves: unknown CVE Source advisory: MEND:WS-2019-0156...

Malicious code in spv-styleguide (npm)

The package spv-styleguide was found to contain malicious code...

Malicious code in ux-angular-styleguide (npm)

The package ux-angular-styleguide was found to contain malicious code...

Malicious code in rfs-styleguide (npm)

The package rfs-styleguide was found to contain malicious code...

MAL-2025-33830 Malicious code in spv-styleguide (npm)

The package spv-styleguide was found to contain malicious code...

MAL-2025-32192 Malicious code in rfs-styleguide (npm)

The package rfs-styleguide was found to contain malicious code...

MAL-2025-24846 Malicious code in kwtest-styleguide (npm)

The package kwtest-styleguide was found to contain malicious code...

MAL-2025-18820 Malicious code in dromar-styleguide (npm)

The package dromar-styleguide was found to contain malicious code...

MAL-2025-38021 Malicious code in ux-angular-styleguide (npm)

The package ux-angular-styleguide was found to contain malicious code...

Malicious code in dromar-styleguide (npm)

The package dromar-styleguide was found to contain malicious code...

MAL-2025-38024 Malicious code in ux-styleguide (npm)

The package ux-styleguide was found to contain malicious code...

Malicious code in ux-styleguide (npm)

The package ux-styleguide was found to contain malicious code...

Malicious code in kwtest-styleguide (npm)

The package kwtest-styleguide was found to contain malicious code...

Malware in auth0-styleguide-website

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5632 Malicious code in auth0-styleguide-website (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ac62aa1f1cbfe11927a1bc4a54326be2b214f65a0d101d475bf45c44b0d96f4 Any computer that has this package installed or running should be considered...

Malicious code in auth0-styleguide-website (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ac62aa1f1cbfe11927a1bc4a54326be2b214f65a0d101d475bf45c44b0d96f4 Any computer that has this package installed or running should be considered...

@alv-ch/alv-styleguide (>=0.0.1-1.alpha, <=0.1.8), @alv-ch/cms-styleguide (>=0.0.1, <=1.0.1) potentially affected by CVE-2025-25300 via smartbanner.js (1.7.0)

smartbanner.js NPM version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on smartbanner.js and may be impacted: - @alv-ch/alv-styleguide =0.0.1-1.alpha, =0.0.1, =1.0.1 Source cves: CVE-2025-25300 Source advisory: MEND:CVE-2025-25300...

Malicious code in brightspot-styleguide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3c067832c2cb4a73a08be5b61a55b52eefaeec955b12175a2cb116a906673e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in brightspot-styleguide

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...