EUVD-2026-46151

Versions of the package mongo-object before 3.0.3 are vulnerable to Prototype Pollution via the expandKey function in util.js. An attacker can modify the JavaScript prototype chain by supplying a crafted property path containing special keys such as proto...

Malicious code in bfx-util-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06a182f7174219826e3c695916a2f50d39adc169f803af3428b756cda3e7a9a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1553 Malicious code in bfx-util-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06a182f7174219826e3c695916a2f50d39adc169f803af3428b756cda3e7a9a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...