MAL-2025-47308 Malicious code in ember-headless-form-yup (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed8ff319c2845a41812ca372e9a7e36c894cd5027bfadab1381fefb8892e4074 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in yup-latest (npm)

The package yup-latest was found to contain malicious code...

MAL-2025-40664 Malicious code in yup-latest (npm)

The package yup-latest was found to contain malicious code...

Prototype Pollution in jquense/yup

Description yup is vulnerable to Prototype Pollution. This package allowing for modification of prototype behavior, which may result in Information Disclosure/DoS/RCE. Proof of Concept 1. Create the following PoC file: js // poc.js let yup = require'yup'; const payload =...