Malicious code in neuromorphic-terser-csv-dagda (npm)

The package neuromorphic-terser-csv-dagda was found to contain malicious code...

Malicious code in asteroid-andromeda-superagent-terser (npm)

The package asteroid-andromeda-superagent-terser was found to contain malicious code...

MAL-2025-33578 Malicious code in soap-titan-terser-webpack-plugin-betelgeuse (npm)

The package soap-titan-terser-webpack-plugin-betelgeuse was found to contain malicious code...

MAL-2025-18672 Malicious code in dotenv-safe-titan-terser-markdown (npm)

The package dotenv-safe-titan-terser-markdown was found to contain malicious code...

Malicious code in terser-aldebaran-run-script-websockets (npm)

The package terser-aldebaran-run-script-websockets was found to contain malicious code...

Malicious code in paleomagnetism-quark-terser-webpack-plugin-grus (npm)

The package paleomagnetism-quark-terser-webpack-plugin-grus was found to contain malicious code...

MAL-2025-34760 Malicious code in terser-webpack-plugin-nebula-fetch-umbriel (npm)

The package terser-webpack-plugin-nebula-fetch-umbriel was found to contain malicious code...

MAL-2025-16760 Malicious code in chai-terser-forever-wormhole (npm)

The package chai-terser-forever-wormhole was found to contain malicious code...

MAL-2025-34761 Malicious code in terser-webpack-plugin-rollup-npm-yildun (npm)

The package terser-webpack-plugin-rollup-npm-yildun was found to contain malicious code...

MAL-2025-32932 Malicious code in semantic-ui-nestjs-ionosphere-terser-webpack-plugin (npm)

The package semantic-ui-nestjs-ionosphere-terser-webpack-plugin was found to contain malicious code...

Security Bulletin: Vulnerability in Node.js terser affect Cloud Pak System[CVE-2022-25858]

Summary Vulnerability found in Node.js terser module affect Cloud Pak System. IBM Cloud Pak System has addressed this vulnerability. Vulnerability Details CVEID:CVE-2022-25858 DESCRIPTION: Node.js terser module is vulnerable to a denial of service, caused by a regular expression denial of service...

terser: insecure use of regular expressions leads to ReDoS

A vulnerability was found in the terser package. Affected versions of this package are vulnerable to Regular expression denial of service ReDoS attacks, affecting system availability...

Important: Red Hat Security Advisory: Service Registry (container images) release and security update [2.3.0.GA]

An update to the images for Red Hat Integration Service Registry is now available from the Red Hat Container Catalog. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact o...

CVE-2022-25858

A vulnerability was found in the terser package. Affected versions of this package are vulnerable to Regular expression denial of service ReDoS attacks, affecting system availability...

MAL-2022-6461 Malicious code in terser-ebrpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbfd04afe646e9166920ed056f1f41073ad78598c97ebf1bbb4e664d4352cf2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in terser-ebrpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbfd04afe646e9166920ed056f1f41073ad78598c97ebf1bbb4e664d4352cf2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Regular Expression Denial Of Service (ReDoS)

terser is vulnerable to regular expression denial of service. The vulnerability exists in index.js and evaluate.js because regular expressions used are not properly handled which allows an attacker to send crafted requests which causes an application crash...

3nit-utils (>=0.30.0, <=1.0.2), 6ix (0.0.0-canary.0) +1012 more potentially affected by CVE-2022-25858 via terser (>=4.0.0, <=4.8.0)

terser NPM version =4.0.0, =0.30.0, =0.0.0-canary.0, =0.0.1, =1.0.0-alpha.9, =1.0.0, =0.0.2, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.10 - @agilejs/cli 1.0.0 and more Source cves: CVE-2022-25858 Source advisory: OSV:GHSA-4WF5-VPHF-C2XC...

GHSA-4WF5-VPHF-C2XC Terser insecure use of regular expressions leads to ReDoS

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service ReDoS due to insecure usage of regular expressions...

Terser insecure use of regular expressions leads to ReDoS

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service ReDoS due to insecure usage of regular expressions...