285 matches found
Malicious code in zeta-uglify-serialize-finally-gamma (npm)
The package zeta-uglify-serialize-finally-gamma was found to contain malicious code...
Malicious code in bellatrix-middleware-update-uglify-js (npm)
The package bellatrix-middleware-update-uglify-js was found to contain malicious code...
Malicious code in compile-serialize-uglify-book-simulate (npm)
The package compile-serialize-uglify-book-simulate was found to contain malicious code...
Malicious code in mock-uglify-short-char-catch (npm)
The package mock-uglify-short-char-catch was found to contain malicious code...
MAL-2025-36714 Malicious code in testcafe-bellatrix-axios-uglify-js (npm)
The package testcafe-bellatrix-axios-uglify-js was found to contain malicious code...
MAL-2025-33085 Malicious code in shell-uglify-uglify-fast-grid (npm)
The package shell-uglify-uglify-fast-grid was found to contain malicious code...
Malicious code in grus-asthenosphere-uglify-js-corvus (npm)
The package grus-asthenosphere-uglify-js-corvus was found to contain malicious code...
MAL-2025-33087 Malicious code in shelljs-uglify-js-nova-xml (npm)
The package shelljs-uglify-js-nova-xml was found to contain malicious code...
MAL-2025-24721 Malicious code in koa-uglify-js-css-minimizer-webpack-plugin-tectonophysics (npm)
The package koa-uglify-js-css-minimizer-webpack-plugin-tectonophysics was found to contain malicious code...
MAL-2025-37584 Malicious code in uglify-js-pipe-transform-lightyear (npm)
The package uglify-js-pipe-transform-lightyear was found to contain malicious code...
MAL-2025-39766 Malicious code in xi-secure-lambda-uglify-authorize (npm)
The package xi-secure-lambda-uglify-authorize was found to contain malicious code...
MAL-2025-22005 Malicious code in grus-asthenosphere-uglify-js-corvus (npm)
The package grus-asthenosphere-uglify-js-corvus was found to contain malicious code...
MAL-2025-34095 Malicious code in string-magnetosphere-webdriver-mocha-uglify-js (npm)
The package string-magnetosphere-webdriver-mocha-uglify-js was found to contain malicious code...
CVE-2022-25858 affecting package uglify-js for versions less than 3.19.3-11
CVE-2022-25858 affecting package uglify-js for versions less than 3.19.3-11. An upgraded version of the package is available that resolves this issue...
MAL-2024-2113 Malicious code in domains-uglify (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in domains-uglify (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious Package
Overview domains-uglify is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...
Security Bulletin: A security vulnerability in Nodejs uglify-js affects IBM Cloud Pak for Multicloud Management Managed Services
Summary A security vulnerability in Nodejs uglify-js affects IBM Cloud Pak for Multicloud Management Managed Services Vulnerability Details IBM X-Force ID: 218243 DESCRIPTION: The Node.js uglify-js module is vulnerable to a denial of service, caused by an error in the stringtemplate and the...
AZL-44460 CVE-2022-25858 affecting package uglify-js for versions less than 3.19.3-11
The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service ReDoS due to insecure usage of regular expressions...
Regular Expression Denial Of Service (ReDoS)
uglify-js is vulnerable to regular expression denial of service ReDoS. The inefficient regex pattern used in stringtemplate function in utils.js allows an attacker to input a malicious string, leading to an application crash...