64 matches found
CLSA-2026-1777336759 TuxCare security update for yargs-parser (1 CVE)
TuxCare rebuilt yargs-parser to address 1 CVE. Fixed in 13.1.2-tuxcare.1...
CLSA-2026-1774225193 TuxCare security update for yargs-parser (1 CVE)
TuxCare rebuilt yargs-parser to address 1 CVE. Fixed in 11.1.1-tuxcare.1...
CLSA-2026-1774225199 TuxCare security update for yargs-parser (1 CVE)
TuxCare rebuilt yargs-parser to address 1 CVE. Fixed in 4.2.1-tuxcare.1...
CLSA-2026-1774225196 TuxCare security update for yargs-parser (1 CVE)
TuxCare rebuilt yargs-parser to address 1 CVE. Fixed in 7.0.0-tuxcare.1...
CLSA-2026-1774225198 TuxCare security update for yargs-parser (1 CVE)
TuxCare rebuilt yargs-parser to address 1 CVE. Fixed in 10.1.0-tuxcare.1...
PT-2026-74073
TuxCare rebuilt yargs-parser to address 1 CVE. Fixed in 7.0.0-tuxcare.1...
PT-2026-74070
TuxCare rebuilt yargs-parser to address 1 CVE. Fixed in 11.1.1-tuxcare.1...
PT-2026-74075
TuxCare rebuilt yargs-parser to address 1 CVE. Fixed in 10.1.0-tuxcare.1...
PT-2026-74621
TuxCare rebuilt yargs-parser to address 1 CVE. Fixed in 13.1.2-tuxcare.1...
PT-2026-74076
TuxCare rebuilt yargs-parser to address 1 CVE. Fixed in 4.2.1-tuxcare.1...
Malicious code in yargsplus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ae65e1d6362744681f51216b451ba9889176b3b0c28b1b4c943f1b5033fdd4 The package declares a postinstall hook node.init.js that runs automatically on npm install. The script enumerates roughly 60 credential and CI...
MiracleLinux 7 : rh-nodejs10-nodejs-10.23.1-2.el7 (AXSA:2021-1479:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1479:01 advisory. libuv: buffer overflow in realpath CVE-2020-8252 nodejs-npm-user-validate: improper input validation when validating user emails leads to ReDoS...
Malicious code in yargs-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376960ce1e5da7d01dd733e2ab53f7c0b614b4f98bf23da45b88c2bf3f169037 The package yargs-js was found to contain malicious code. Source: ghsa-malware f0f6199e2f9202a8ae9ecbd9363eb1b1f2d56b7ab11d600b01dd0bc1adcb31c6 Any...
Malicious Package
Overview yargs-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
EUVD-2026-1992
Malicious code in yargs-js npm...
MAL-2026-207 Malicious code in yargs-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376960ce1e5da7d01dd733e2ab53f7c0b614b4f98bf23da45b88c2bf3f169037 The package yargs-js was found to contain malicious code. Source: ghsa-malware f0f6199e2f9202a8ae9ecbd9363eb1b1f2d56b7ab11d600b01dd0bc1adcb31c6 Any...
EUVD-2020-1208
Malware in sbrugna...
Malicious code in yargs-help-output (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1337d3becd83c0b3dc233069268371bc9e7395311560038f52cbe73384e4efa5 Any computer that has this package installed or running should be considered fully compromised. All...
Malware in yargs-help-output
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-47366 Malicious code in yargs-help-output (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1337d3becd83c0b3dc233069268371bc9e7395311560038f52cbe73384e4efa5 Any computer that has this package installed or running should be considered fully compromised. All...