MAL-2025-37760 Malicious code in unicorn-v3sgp-gsyhr-radiance-project (npm)

The package unicorn-v3sgp-gsyhr-radiance-project was found to contain malicious code...

Malicious code in unicorn-5o0wt-dbtzy-terra-project (npm)

The package unicorn-5o0wt-dbtzy-terra-project was found to contain malicious code...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via qemuramfree. Remediation Upgrade unicorn to version 2.0.0 or higher. References - GitHub Commit - GitHub Commit - GitHub Commit - GitHub Issue - Write up Credit: liyansong2018...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free via the hook function. Remediation Upgrade unicorn to version 2.0.0 or higher. References - GitHub Commit - GitHub Issue Credit: liyansong2018...