advisory-db

This is a security advisory database for Rust crates published through crates.io. The database is maintained by the RustSec project and contains information on security vulnerabilities in various Rust crates. The database is stored in TOML format and can be consumed by various tools for auditing...

Malicious code in optimize-css-assets-webpack-plugin-izar-nuxtjs-toml (npm)

The package optimize-css-assets-webpack-plugin-izar-nuxtjs-toml was found to contain malicious code...

Malicious code in toml-superposition-barnard-sqlite (npm)

The package toml-superposition-barnard-sqlite was found to contain malicious code...

Malicious code in toml-dotenv-safe-dysonswarm-quantumfoam (npm)

The package toml-dotenv-safe-dysonswarm-quantumfoam was found to contain malicious code...

MAL-2025-46362 Malicious code in toml-dotenv-safe-dysonswarm-quantumfoam (npm)

The package toml-dotenv-safe-dysonswarm-quantumfoam was found to contain malicious code...

Malicious code in betelgeuse-react-bootstrap-toml-wolf (npm)

The package betelgeuse-react-bootstrap-toml-wolf was found to contain malicious code...

Malicious code in node-config-toml-deimos-pegasus (npm)

The package node-config-toml-deimos-pegasus was found to contain malicious code...

Malicious code in magellan-geckodriver-toml-leda (npm)

The package magellan-geckodriver-toml-leda was found to contain malicious code...

MAL-2025-46363 Malicious code in toml-superposition-barnard-sqlite (npm)

The package toml-superposition-barnard-sqlite was found to contain malicious code...

MAL-2025-45473 Malicious code in optimize-css-assets-webpack-plugin-izar-nuxtjs-toml (npm)

The package optimize-css-assets-webpack-plugin-izar-nuxtjs-toml was found to contain malicious code...

MAL-2025-43615 Malicious code in betelgeuse-react-bootstrap-toml-wolf (npm)

The package betelgeuse-react-bootstrap-toml-wolf was found to contain malicious code...

MAL-2025-45331 Malicious code in node-config-toml-deimos-pegasus (npm)

The package node-config-toml-deimos-pegasus was found to contain malicious code...

MAL-2025-45086 Malicious code in magellan-geckodriver-toml-leda (npm)

The package magellan-geckodriver-toml-leda was found to contain malicious code...

CVE-2025-55195

@std/toml is the Deno Standard Library. Prior to version 1.0.9, an attacker can pollute the prototype chain in Node.js runtime and Browser when parsing untrusted TOML data, thus achieving Prototype Pollution PP vulnerability. This is because the library is merging an untrusted object with an empt...

Malicious code in lint-framework-link-toml (npm)

The package lint-framework-link-toml was found to contain malicious code...

Malicious code in callback-apex-ursa-toml (npm)

The package callback-apex-ursa-toml was found to contain malicious code...

Malicious code in mira-bioinformatics-toml-izar (npm)

The package mira-bioinformatics-toml-izar was found to contain malicious code...

Malicious code in jasmine-antimatter-toml-photon (npm)

The package jasmine-antimatter-toml-photon was found to contain malicious code...

Malicious code in toml-private-cosmos-entanglement (npm)

The package toml-private-cosmos-entanglement was found to contain malicious code...

Malicious code in frontend-element-ui-magellan-toml (npm)

The package frontend-element-ui-magellan-toml was found to contain malicious code...