npm incidents
Recent npm vulnerabilities and malicious packages from OSV and CISA KEV, enriched with EPSS exploit probability.
Malicious code in agentgui (npm)
Malicious code in agentgui (npm)
Malicious code in livemcp (npm)
Malicious code in livemcp (npm)
Malicious code in dext-crate-video (npm)
Malicious code in dext-crate-video (npm)
Malicious code in polis-diraja (npm)
Malicious code in polis-diraja (npm)
Malicious code in react-dynamic-parser (npm)
Malicious code in react-dynamic-parser (npm)
Malicious code in react-emits (npm)
Malicious code in react-emits (npm)
Malicious code in create-json-client (npm)
Malicious code in create-json-client (npm)
Malicious code in mcp-real-chrome (npm)
Malicious code in mcp-real-chrome (npm)
Malicious code in dext-crate-image (npm)
Malicious code in dext-crate-image (npm)
Malicious code in @deepaksilaych/sess (npm)
Malicious code in @deepaksilaych/sess (npm)
Malicious code in dext-crate-check (npm)
Malicious code in dext-crate-check (npm)
Malicious code in tkyoussef-hb (npm)
Malicious code in tkyoussef-hb (npm)
Malicious code in sm-oauth (npm)
Malicious code in sm-oauth (npm)
Malicious code in chai-as-mno (npm)
Malicious code in chai-as-mno (npm)
Malicious code in dims-svelte-ui (npm)
Malicious code in dims-svelte-ui (npm)
Malicious code in @medisend/auth (npm)
Malicious code in @medisend/auth (npm)
Malicious code in svelte-dim-ui (npm)
Malicious code in svelte-dim-ui (npm)
Malicious code in @temptation.js/utils (npm)
Malicious code in @temptation.js/utils (npm)
Malicious code in @medisend/shared (npm)
Malicious code in @medisend/shared (npm)
Malicious code in @medisend/core (npm)
Malicious code in @medisend/core (npm)
Malicious code in auth-otp (npm)
Malicious code in auth-otp (npm)
Malicious code in dims-hydration-ui (npm)
Malicious code in dims-hydration-ui (npm)
Malicious code in babel-polyfill-plugin-corejs2 (npm)
Malicious code in babel-polyfill-plugin-corejs2 (npm)
Malicious code in dpg-media-7ehemel (npm)
Malicious code in dpg-media-7ehemel (npm)
Malicious code in manticore-log (npm)
Malicious code in manticore-log (npm)
Malicious code in paypal-business-sdk (npm)
Malicious code in paypal-business-sdk (npm)
Malicious code in dotish (npm)
Malicious code in dotish (npm)
Malicious code in kelly-stake-sizing (npm)
Malicious code in kelly-stake-sizing (npm)
Malicious code in remove-bg-serverless-azure (npm)
Malicious code in remove-bg-serverless-azure (npm)
Malicious code in poly-price-node (npm)
Malicious code in poly-price-node (npm)
Malicious code in openai-pr-reviewer (npm)
Malicious code in openai-pr-reviewer (npm)
Malicious code in dim-hydration-ui (npm)
Malicious code in dim-hydration-ui (npm)
Malicious code in secret-key-totp (npm)
Malicious code in secret-key-totp (npm)
Malicious code in @blurrydespair/libsignal-node (npm)
Malicious code in @blurrydespair/libsignal-node (npm)
Malicious code in web-advertising (npm)
Malicious code in web-advertising (npm)
Malicious code in hydration-ui-dim (npm)
Malicious code in hydration-ui-dim (npm)
Malicious code in message-compiler (npm)
Malicious code in message-compiler (npm)
Malicious code in amundi-compare (npm)
Malicious code in amundi-compare (npm)
Malicious code in consumerweb-serverutils (npm)
Malicious code in consumerweb-serverutils (npm)
Malicious code in @elc-online/up-analytics (npm)
Malicious code in @elc-online/up-analytics (npm)
Malicious code in fund-calculator (npm)
Malicious code in fund-calculator (npm)
Malicious code in @gsas/gsas-sdk (npm)
Malicious code in @gsas/gsas-sdk (npm)
Malicious code in ppb-manticore (npm)
Malicious code in ppb-manticore (npm)
Malicious code in hydration-dim-ui (npm)
Malicious code in hydration-dim-ui (npm)
Malicious code in @medisend/webview-bridge (npm)
Malicious code in @medisend/webview-bridge (npm)
Malicious code in svelte-ui-dim (npm)
Malicious code in svelte-ui-dim (npm)
Malicious code in sm-session (npm)
Malicious code in sm-session (npm)
Malicious code in sm-admin (npm)
Malicious code in sm-admin (npm)
Malicious code in sm-checkout (npm)
Malicious code in sm-checkout (npm)
Malicious code in sm-payment (npm)
Malicious code in sm-payment (npm)
Malicious code in sm-billing-form (npm)
Malicious code in sm-billing-form (npm)
Malicious code in sm-cart (npm)
Malicious code in sm-cart (npm)
Malicious code in sm-apikey-model (npm)
Malicious code in sm-apikey-model (npm)
Malicious code in @sdgdfgdfhhhfd/multiviewr (npm)
Malicious code in @sdgdfgdfhhhfd/multiviewr (npm)
Malicious code in svelte-dim-kit (npm)
Malicious code in svelte-dim-kit (npm)
Malicious code in @opap/player-kyc-widget (npm)
Malicious code in @opap/player-kyc-widget (npm)
Malicious code in hydration-dim-kit (npm)
Malicious code in hydration-dim-kit (npm)
Malicious code in @sdgdfgdfhhhfd/chainvista (npm)
Malicious code in @sdgdfgdfhhhfd/chainvista (npm)
Malicious code in fund-list-filter (npm)
Malicious code in fund-list-filter (npm)
Malicious code in 3-buildsight-web (npm)
Malicious code in 3-buildsight-web (npm)
Malicious code in 10-shardsight-web (npm)
Malicious code in 10-shardsight-web (npm)
Malicious code in 2-loadsight-web (npm)
Malicious code in 2-loadsight-web (npm)
Malicious code in hatdhat-testkit (npm)
Malicious code in hatdhat-testkit (npm)
Malicious code in 8-fetchsight-web (npm)
Malicious code in 8-fetchsight-web (npm)
Malicious code in @syncraft-labs/core (npm)
Malicious code in @syncraft-labs/core (npm)
Malicious code in chai-as-testkit (npm)
Malicious code in chai-as-testkit (npm)
Malicious code in stillm4ddpocs-demo-sprocket (npm)
Malicious code in stillm4ddpocs-demo-sprocket (npm)
Malicious code in 6-viewsight-web (npm)
Malicious code in 6-viewsight-web (npm)
Malicious code in stillm4ddpocs-rtest-bravo (npm)
Malicious code in stillm4ddpocs-rtest-bravo (npm)
Malicious code in @syncraft-labs/vue (npm)
Malicious code in @syncraft-labs/vue (npm)
Malicious code in @usaa-grp-personal-profile/personal-profile-common (npm)
Malicious code in @usaa-grp-personal-profile/personal-profile-common (npm)
Malicious code in rust-testing-utils (npm)
Malicious code in rust-testing-utils (npm)
Malicious code in solidity-testing-utils (npm)
Malicious code in solidity-testing-utils (npm)
Malicious code in stillm4ddpocs-rtest-alpha (npm)
Malicious code in stillm4ddpocs-rtest-alpha (npm)
Malicious code in fund-portfolio (npm)
Malicious code in fund-portfolio (npm)
Malicious code in create-coin (npm)
Malicious code in create-coin (npm)
Malicious code in @syncraft-labs/react (npm)
Malicious code in @syncraft-labs/react (npm)
Malicious code in stillm4ddpocs-demo-widget (npm)
Malicious code in stillm4ddpocs-demo-widget (npm)
Malicious code in internallib_v902 (npm)
Malicious code in internallib_v902 (npm)
Malicious code in @postman-cse/okta-aio-linux-arm64 (npm)
Malicious code in @postman-cse/okta-aio-linux-arm64 (npm)
Malicious code in stillm4ddpocs-demo-gadget (npm)
Malicious code in stillm4ddpocs-demo-gadget (npm)
Malicious code in totp-utils (npm)
Malicious code in totp-utils (npm)
Malicious code in tailwind-animate-css-plugin (npm)
Malicious code in tailwind-animate-css-plugin (npm)
Unleash: Unauthenticated single-request DoS via OpenAPI validation error formatter
Unleash: Unauthenticated single-request DoS via OpenAPI validation error formatter
Malicious code in @gfe/lx-watcher (npm)
Malicious code in @gfe/lx-watcher (npm)
Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request headers
Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request headers
JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions
JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions
Malicious code in lumen-pages-community (npm)
Malicious code in lumen-pages-community (npm)
Keystone vulnerable to `graphql.maxTake` bypass with negative `take`
Keystone vulnerable to `graphql.maxTake` bypass with negative `take`
Malicious code in fuel-react (npm)
Malicious code in fuel-react (npm)
Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username
Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username
JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions
JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions
JSONata: Arbitrary Code Execution via crafted JSONata expressions
JSONata: Arbitrary Code Execution via crafted JSONata expressions
Malicious code in kelly-sizing (npm)
Malicious code in kelly-sizing (npm)
Defuddle vulnerable to XSS via unescaped attribute interpolation in site extractors
Defuddle vulnerable to XSS via unescaped attribute interpolation in site extractors
Malicious code in chai-as-soul (npm)
Malicious code in chai-as-soul (npm)
Malicious code in moidevy (npm)
Malicious code in moidevy (npm)
Malicious code in mcq-session (npm)
Malicious code in mcq-session (npm)
Malicious code in @next-fonts/font (npm)
Malicious code in @next-fonts/font (npm)
Malicious code in @js-lib-team/env-parser (npm)
Malicious code in @js-lib-team/env-parser (npm)
Malicious code in coin-fees (npm)
Malicious code in coin-fees (npm)
Malicious code in express-session-handler (npm)
Malicious code in express-session-handler (npm)
Malicious code in expect-dotenv (npm)
Malicious code in expect-dotenv (npm)
Malicious code in @httttt/mcp-demo (npm)
Malicious code in @httttt/mcp-demo (npm)
Qinglong has an incomplete fix for CVE-2026-3965: Improper Authentication
Qinglong has an incomplete fix for CVE-2026-3965: Improper Authentication
node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoS
node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoS
NocoBase backup restore schema name allows command injection
NocoBase backup restore schema name allows command injection
Malicious code in fetch-webjs-script (npm)
Malicious code in fetch-webjs-script (npm)
Malicious code in test-flow-1 (npm)
Malicious code in test-flow-1 (npm)
Malicious code in exam-kit (npm)
Malicious code in exam-kit (npm)
Malicious code in test-flow-entire7 (npm)
Malicious code in test-flow-entire7 (npm)
Malicious code in create-react-app-text (npm)
Malicious code in create-react-app-text (npm)
next-video: Unauthenticated arbitrary file read via /api/video request handler
next-video: Unauthenticated arbitrary file read via /api/video request handler
Malicious code in @pablo_clueless/sniffr (npm)
Malicious code in @pablo_clueless/sniffr (npm)
Malicious code in create-react-app-ui (npm)
Malicious code in create-react-app-ui (npm)
gettext-converter: Prototype pollution in js2i18next() via crafted translation keys
gettext-converter: Prototype pollution in js2i18next() via crafted translation keys
Malicious code in test-flow-entire6 (npm)
Malicious code in test-flow-entire6 (npm)
Malicious code in frenchworldcupwin (npm)
Malicious code in frenchworldcupwin (npm)
node-opcua missing nonce verification in UserNameIdentityToken authentication
node-opcua missing nonce verification in UserNameIdentityToken authentication
Malicious code in @pablo_clueless/printr (npm)
Malicious code in @pablo_clueless/printr (npm)
Malicious code in goldstar-api-server (npm)
Malicious code in goldstar-api-server (npm)
Malicious code in create-react-app-ux (npm)
Malicious code in create-react-app-ux (npm)
NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution
NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution
Malicious code in cig-data-patcher (npm)
Malicious code in cig-data-patcher (npm)
Malicious code in ethereum-validator (npm)
Malicious code in ethereum-validator (npm)
Malicious code in debug-fnt (npm)
Malicious code in debug-fnt (npm)
Malicious code in no-for-of-loops (npm)
Malicious code in no-for-of-loops (npm)
Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root
Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root
Malicious code in luluking1 (npm)
Malicious code in luluking1 (npm)
Malicious code in api-rs-tuils (npm)
Malicious code in api-rs-tuils (npm)
Malicious code in ranux-pro (npm)
Malicious code in ranux-pro (npm)
Malicious code in arb-kit (npm)
Malicious code in arb-kit (npm)
Malicious code in ranux-dev (npm)
Malicious code in ranux-dev (npm)
Malicious code in modsync (npm)
Malicious code in modsync (npm)
Malicious code in pump-fun-skills (npm)
Malicious code in pump-fun-skills (npm)
Malicious code in saaa9 (npm)
Malicious code in saaa9 (npm)
Malicious code in localize-extract (npm)
Malicious code in localize-extract (npm)
Malicious code in react-dom-helpers (npm)
Malicious code in react-dom-helpers (npm)
Malicious code in ranux-cloud (npm)
Malicious code in ranux-cloud (npm)
Malicious code in gaarf-node (npm)
Malicious code in gaarf-node (npm)
Malicious code in @sarex-team/translator (npm)
Malicious code in @sarex-team/translator (npm)
Malicious code in syboy (npm)
Malicious code in syboy (npm)
Malicious code in sui-gql-rpc (npm)
Malicious code in sui-gql-rpc (npm)
Malicious code in tfjs-inference (npm)
Malicious code in tfjs-inference (npm)
Malicious code in postcss-initialize-provider (npm)
Malicious code in postcss-initialize-provider (npm)
Malicious code in dxrs-dos (npm)
Malicious code in dxrs-dos (npm)
Malicious code in secp256k1-lib (npm)
Malicious code in secp256k1-lib (npm)
Malicious code in flydev (npm)
Malicious code in flydev (npm)
Malicious code in npm-wold (npm)
Malicious code in npm-wold (npm)
Malicious code in nice-utils-helper (npm)
Malicious code in nice-utils-helper (npm)
Malicious code in chromecast-webdriver-cli (npm)
Malicious code in chromecast-webdriver-cli (npm)
Malicious code in hardhat-hold (npm)
Malicious code in hardhat-hold (npm)
Malicious code in gemini-cli-a2a-server (npm)
Malicious code in gemini-cli-a2a-server (npm)
Malicious code in commandor-lib (npm)
Malicious code in commandor-lib (npm)
Malicious code in config-helper-kit (npm)
Malicious code in config-helper-kit (npm)
Malicious code in ngsw-config (npm)
Malicious code in ngsw-config (npm)
Malicious code in github-policy-bot (npm)
Malicious code in github-policy-bot (npm)
Malicious code in magika-js (npm)
Malicious code in magika-js (npm)
Malicious code in solidity-hold (npm)
Malicious code in solidity-hold (npm)
Malicious code in dxr-dos (npm)
Malicious code in dxr-dos (npm)
Malicious code in ssb-test-package (npm)
Malicious code in ssb-test-package (npm)
Malicious code in chromeos-webdriver-cli (npm)
Malicious code in chromeos-webdriver-cli (npm)
Malicious code in chrome-enterprise-premium-mcp (npm)
Malicious code in chrome-enterprise-premium-mcp (npm)
Malicious code in bazelisk (npm)
Malicious code in bazelisk (npm)
Malicious code in carbon-monorepo (npm)
Malicious code in carbon-monorepo (npm)
Malicious code in code-assist-mcp (npm)
Malicious code in code-assist-mcp (npm)
Malicious code in electro-session (npm)
Malicious code in electro-session (npm)
Malicious code in streak-cal-core (npm)
Malicious code in streak-cal-core (npm)
Malicious code in mapkit-loader (npm)
Malicious code in mapkit-loader (npm)
Malicious code in animate-css-vite (npm)
Malicious code in animate-css-vite (npm)
Malicious code in streak-key-lib (npm)
Malicious code in streak-key-lib (npm)
Malicious code in sysdo (npm)
Malicious code in sysdo (npm)
Malicious code in sui-graphql-rpc (npm)
Malicious code in sui-graphql-rpc (npm)
Malicious code in gaarf (npm)
Malicious code in gaarf (npm)
Malicious code in broadcast-graphics-mcp (npm)
Malicious code in broadcast-graphics-mcp (npm)
Malicious code in sysc1 (npm)
Malicious code in sysc1 (npm)
Malicious code in sw-pluginer (npm)
Malicious code in sw-pluginer (npm)
Malicious code in syjoy (npm)
Malicious code in syjoy (npm)
Malicious code in timed-assess (npm)
Malicious code in timed-assess (npm)
Malicious code in gaarf-bq (npm)
Malicious code in gaarf-bq (npm)
Malicious code in @lilsccott6x9/devpipe-connector (npm)
Malicious code in @lilsccott6x9/devpipe-connector (npm)
Malicious code in @sarex-team/sdk-js (npm)
Malicious code in @sarex-team/sdk-js (npm)
Malicious code in ambera (npm)
Malicious code in ambera (npm)
Malicious code in gaarf-node-bq (npm)
Malicious code in gaarf-node-bq (npm)
Malicious code in setup-codex (npm)
Malicious code in setup-codex (npm)
Malicious code in chai-as-gateway (npm)
Malicious code in chai-as-gateway (npm)
Malicious code in chameleon-src (npm)
Malicious code in chameleon-src (npm)
Malicious code in @sarex-team/viewer (npm)
Malicious code in @sarex-team/viewer (npm)
Malicious code in tfjs-custom-module (npm)
Malicious code in tfjs-custom-module (npm)
Malicious code in chaikit (npm)
Malicious code in chaikit (npm)
Malicious code in twapfetch (npm)
Malicious code in twapfetch (npm)
Malicious code in eth-batcher (npm)
Malicious code in eth-batcher (npm)
Malicious code in txs-runner-sdk (npm)
Malicious code in txs-runner-sdk (npm)
Malicious code in @sarex-team/ui-kit (npm)
Malicious code in @sarex-team/ui-kit (npm)
Malicious code in streak-metric-test (npm)
Malicious code in streak-metric-test (npm)
Malicious code in system-performance-helper (npm)
Malicious code in system-performance-helper (npm)
Malicious code in tailwind-extension-kit (npm)
Malicious code in tailwind-extension-kit (npm)
Malicious code in tailwind-utility-kit (npm)
Malicious code in tailwind-utility-kit (npm)
Malicious code in core-js-gns (npm)
Malicious code in core-js-gns (npm)
Malicious code in tailwind-custom-templates (npm)
Malicious code in tailwind-custom-templates (npm)
Malicious code in @sidp-kiosk/test-npm-snurkeburk-hackerone (npm)
Malicious code in @sidp-kiosk/test-npm-snurkeburk-hackerone (npm)
Malicious code in lodhash-cli (npm)
Malicious code in lodhash-cli (npm)
Malicious code in txs-lib-sdk (npm)
Malicious code in txs-lib-sdk (npm)
Malicious code in test_payload_folder (npm)
Malicious code in test_payload_folder (npm)
Malicious code in ts-rand-sdk (npm)
Malicious code in ts-rand-sdk (npm)
Malicious code in evm-validation (npm)
Malicious code in evm-validation (npm)
Malicious code in node-runtime-utils (npm)
Malicious code in node-runtime-utils (npm)
Malicious code in ai-texts (npm)
Malicious code in ai-texts (npm)
Malicious code in bunnyhijack-test-0x00 (npm)
Malicious code in bunnyhijack-test-0x00 (npm)
Malicious code in ai-texts-utils (npm)
Malicious code in ai-texts-utils (npm)
Malicious code in griffin-transliterator (npm)
Malicious code in griffin-transliterator (npm)
Malicious code in eslint-config-consumerweb (npm)
Malicious code in eslint-config-consumerweb (npm)
Malicious code in @idanefraim/my-ui-kit (npm)
Malicious code in @idanefraim/my-ui-kit (npm)
Malicious code in mc-provider (npm)
Malicious code in mc-provider (npm)
logto-tunnel serves files outside --experience-path via path traversal
logto-tunnel serves files outside --experience-path via path traversal
faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools
faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools
Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint
Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint
Malicious code in base99-85x (npm)
Malicious code in base99-85x (npm)
Malicious code in express-route-engine (npm)
Malicious code in express-route-engine (npm)
grok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools
grok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools
SearXNG MCP Server is Vulnerable to SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)
SearXNG MCP Server is Vulnerable to SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)
Malicious code in x6842179305 (npm)
Malicious code in x6842179305 (npm)
Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)
Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)
claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools
claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools
Malicious code in eth-react-provider (npm)
Malicious code in eth-react-provider (npm)
SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses
SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses
SearXNG MCP Server: Additional hardened-mode SSRF bypasses
SearXNG MCP Server: Additional hardened-mode SSRF bypasses
Malicious code in emoji-prints-fancy (npm)
Malicious code in emoji-prints-fancy (npm)
Malicious code in homekit-mcp (npm)
Malicious code in homekit-mcp (npm)
Malicious code in @wizloft/harness-kernel (npm)
Malicious code in @wizloft/harness-kernel (npm)
Malicious code in mcp-dev-toolkit (npm)
Malicious code in mcp-dev-toolkit (npm)
Malicious code in log-res (npm)
Malicious code in log-res (npm)
Malicious code in @wizloft/harness-validation (npm)
Malicious code in @wizloft/harness-validation (npm)
Malicious code in libas-signal (npm)
Malicious code in libas-signal (npm)
Malicious code in webpack-cdn-fetcher (npm)
Malicious code in webpack-cdn-fetcher (npm)
Malicious code in matrixflow-js (npm)
Malicious code in matrixflow-js (npm)
Malicious code in mutex-lite (npm)
Malicious code in mutex-lite (npm)
Malicious code in layer2-sdk (npm)
Malicious code in layer2-sdk (npm)
Malicious code in anhn-cli (npm)
Malicious code in anhn-cli (npm)
Malicious code in mc-registry (npm)
Malicious code in mc-registry (npm)
Malicious code in neverthrow-core (npm)
Malicious code in neverthrow-core (npm)
Malicious code in gfff5 (npm)
Malicious code in gfff5 (npm)
Malicious code in @wizloft/harness-plugin-repository-files (npm)
Malicious code in @wizloft/harness-plugin-repository-files (npm)
Malicious code in nibra1 (npm)
Malicious code in nibra1 (npm)
Malicious code in minequest (npm)
Malicious code in minequest (npm)
Malicious code in mutex-core (npm)
Malicious code in mutex-core (npm)
Malicious code in mutex-plus (npm)
Malicious code in mutex-plus (npm)
Malicious code in nodealpha (npm)
Malicious code in nodealpha (npm)
Malicious code in localize-translate (npm)
Malicious code in localize-translate (npm)
Malicious code in de-morgan (npm)
Malicious code in de-morgan (npm)
Malicious code in nodeberlin (npm)
Malicious code in nodeberlin (npm)
Malicious code in rand-txs-sdk (npm)
Malicious code in rand-txs-sdk (npm)
Malicious code in @wizloft/harness-context (npm)
Malicious code in @wizloft/harness-context (npm)
Malicious code in electron-sessions (npm)
Malicious code in electron-sessions (npm)
Malicious code in o0o9 (npm)
Malicious code in o0o9 (npm)
Malicious code in price-scripping-js (npm)
Malicious code in price-scripping-js (npm)
Malicious code in karma-proxy (npm)
Malicious code in karma-proxy (npm)
Malicious code in gear-composer (npm)
Malicious code in gear-composer (npm)
Malicious code in @wizloft/harness (npm)
Malicious code in @wizloft/harness (npm)
Malicious code in easydsbots (npm)
Malicious code in easydsbots (npm)
Malicious code in node_cryptography (npm)
Malicious code in node_cryptography (npm)
Malicious code in novel-suduko (npm)
Malicious code in novel-suduko (npm)
GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data
GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data
geolens-cli: before 1.2.3
Malicious code in comander-cli (npm)
Malicious code in comander-cli (npm)
Malicious code in typscript-cli (npm)
Malicious code in typscript-cli (npm)
Malicious code in typesript-core (npm)
Malicious code in typesript-core (npm)
Malicious code in chalk-lib (npm)
Malicious code in chalk-lib (npm)
Malicious code in typescipt-cli (npm)
Malicious code in typescipt-cli (npm)
Malicious code in lodahs-cli (npm)
Malicious code in lodahs-cli (npm)
Malicious code in commandor-core (npm)
Malicious code in commandor-core (npm)
Malicious code in comander-lib (npm)
Malicious code in comander-lib (npm)
Malicious code in axois-http (npm)
Malicious code in axois-http (npm)
Malicious code in typescriptt-cli (npm)
Malicious code in typescriptt-cli (npm)
Malicious code in typescipt-core (npm)
Malicious code in typescipt-core (npm)
Malicious code in typecript-cli (npm)
Malicious code in typecript-cli (npm)
Malicious code in typescrip-cli (npm)
Malicious code in typescrip-cli (npm)
Malicious code in tyepescript-cli (npm)
Malicious code in tyepescript-cli (npm)
Malicious code in lodahsjs (npm)
Malicious code in lodahsjs (npm)
Malicious code in tyepescript-core (npm)
Malicious code in tyepescript-core (npm)
Malicious code in testingsmthb1g (npm)
Malicious code in testingsmthb1g (npm)
Malicious code in typescriptt-core (npm)
Malicious code in typescriptt-core (npm)
Malicious code in typescirpt-cli (npm)
Malicious code in typescirpt-cli (npm)
Malicious code in prism-registry (npm)
Malicious code in prism-registry (npm)
Malicious code in typesript-cli (npm)
Malicious code in typesript-cli (npm)
Malicious code in lodsh-cli (npm)
Malicious code in lodsh-cli (npm)
Malicious code in fast-glob-fast (npm)
Malicious code in fast-glob-fast (npm)
Malicious code in chalk-es (npm)
Malicious code in chalk-es (npm)
Malicious code in comand (npm)
Malicious code in comand (npm)
Malicious code in mutex-thread (npm)
Malicious code in mutex-thread (npm)
Malicious code in ladash-cli (npm)
Malicious code in ladash-cli (npm)
Malicious code in pump-segments-sdk (npm)
Malicious code in pump-segments-sdk (npm)
Malicious code in raectjs (npm)
Malicious code in raectjs (npm)
Malicious code in sui-move-gql (npm)
Malicious code in sui-move-gql (npm)
Malicious code in commandorjs (npm)
Malicious code in commandorjs (npm)
Malicious code in dev-env-check (npm)
Malicious code in dev-env-check (npm)
Malicious code in chalk-core (npm)
Malicious code in chalk-core (npm)
Malicious code in commandor-cli (npm)
Malicious code in commandor-cli (npm)
Malicious code in chalk-util (npm)
Malicious code in chalk-util (npm)
Malicious code in loadashjs (npm)
Malicious code in loadashjs (npm)
Malicious code in bqq1 (npm)
Malicious code in bqq1 (npm)
Malicious code in @evial/runtime-health (npm)
Malicious code in @evial/runtime-health (npm)
Malicious code in lodash-lib (npm)
Malicious code in lodash-lib (npm)
Malicious code in axious-core (npm)
Malicious code in axious-core (npm)
Malicious code in @library-dev-team/data-sanitizer (npm)
Malicious code in @library-dev-team/data-sanitizer (npm)
Malicious code in typscript-core (npm)
Malicious code in typscript-core (npm)
Malicious code in ulebkit (npm)
Malicious code in ulebkit (npm)
Malicious code in @mohamed_nowisar/depconf-canary-test (npm)
Malicious code in @mohamed_nowisar/depconf-canary-test (npm)
Malicious code in optimizely-starter-kit-for-fastly-compute (npm)
Malicious code in optimizely-starter-kit-for-fastly-compute (npm)
Malicious code in test-npm-snurkeburk-hackerone (npm)
Malicious code in test-npm-snurkeburk-hackerone (npm)
Malicious code in mtslink-depconf-probe-profileusername (npm)
Malicious code in mtslink-depconf-probe-profileusername (npm)
Malicious code in vite-svg-config (npm)
Malicious code in vite-svg-config (npm)
Malicious code in agora402-payment-utils (npm)
Malicious code in agora402-payment-utils (npm)
Malicious code in @mohamed_nowisar/token3-check (npm)
Malicious code in @mohamed_nowisar/token3-check (npm)
Malicious code in plugin-react-vite (npm)
Malicious code in plugin-react-vite (npm)
Malicious code in @oyo_tech/oyochat_user (npm)
Malicious code in @oyo_tech/oyochat_user (npm)
Malicious code in typescrit-cli (npm)
Malicious code in typescrit-cli (npm)
MagicMirror socket payload secret placeholder expansion can disclose SECRET_* environment variables
MagicMirror socket payload secret placeholder expansion can disclose SECRET_* environment variables
Malicious code in sui-move-graphql (npm)
Malicious code in sui-move-graphql (npm)
Malicious code in typescirpt-core (npm)
Malicious code in typescirpt-core (npm)
MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery
MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery
MagicMirror: ssrf calendar .js
MagicMirror: ssrf calendar .js
Malicious code in blastradar (npm)
Malicious code in blastradar (npm)
MeshCentral has unsanitized data fields
MeshCentral has unsanitized data fields
MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions
MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions
Malicious code in motionspring (npm)
Malicious code in motionspring (npm)
Malicious code in @milleree/date-display (npm)
Malicious code in @milleree/date-display (npm)
@rhinostone/swig: arbitrary local file read via include/extends path traversal
@rhinostone/swig: arbitrary local file read via include/extends path traversal
Malicious code in alphazone (npm)
Malicious code in alphazone (npm)
Malicious code in core-tailwindcss-utility (npm)
Malicious code in core-tailwindcss-utility (npm)
Malicious code in @reducers/projects (npm)
Malicious code in @reducers/projects (npm)
Malicious code in bcc-design-icons (npm)
Malicious code in bcc-design-icons (npm)
Malicious code in @guildai-services/guildai (npm)
Malicious code in @guildai-services/guildai (npm)
Malicious code in bcc-design (npm)
Malicious code in bcc-design (npm)
Malicious code in @ai-vertical/ai-agent (npm)
Malicious code in @ai-vertical/ai-agent (npm)
Malicious code in a.poltoradnev-package-a (npm)
Malicious code in a.poltoradnev-package-a (npm)
Malicious code in @siwatfa/yorn (npm)
Malicious code in @siwatfa/yorn (npm)
Malicious code in cloud-agen-bot (npm)
Malicious code in cloud-agen-bot (npm)
Malicious code in leb128x (npm)
Malicious code in leb128x (npm)
Malicious code in sui-gql-core (npm)
Malicious code in sui-gql-core (npm)
Malicious code in bcs-core (npm)
Malicious code in bcs-core (npm)
Malicious code in sugarball-cli (npm)
Malicious code in sugarball-cli (npm)
Malicious code in sui-move-rpc (npm)
Malicious code in sui-move-rpc (npm)
Malicious code in runtime-health (npm)
Malicious code in runtime-health (npm)
Malicious code in reseller-app (npm)
Malicious code in reseller-app (npm)
Malicious code in userbotjs-jun (npm)
Malicious code in userbotjs-jun (npm)
Malicious code in autoai (npm)
Malicious code in autoai (npm)
Malicious code in club-sauce (npm)
Malicious code in club-sauce (npm)
Malicious code in junofficial-userbot (npm)
Malicious code in junofficial-userbot (npm)
Malicious code in userbotjs (npm)
Malicious code in userbotjs (npm)
Malicious code in @junofficial/baileys (npm)
Malicious code in @junofficial/baileys (npm)
DeepmergeTS has stack exhaustion when merging recursive object graphs
DeepmergeTS has stack exhaustion when merging recursive object graphs
MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth
MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth
MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id
MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id
Malicious code in twilio-hackerone-poc-afe6937c (npm)
Malicious code in twilio-hackerone-poc-afe6937c (npm)
Malicious code in autbank-core (npm)
Malicious code in autbank-core (npm)
Malicious code in upload-to-gcp (npm)
Malicious code in upload-to-gcp (npm)
Malicious code in akamai-sensor (npm)
Malicious code in akamai-sensor (npm)
Malicious code in hunterone-build-probe-9210 (npm)
Malicious code in hunterone-build-probe-9210 (npm)
Malicious code in tw-pkgprobe-7731 (npm)
Malicious code in tw-pkgprobe-7731 (npm)
Malicious code in adxaa (npm)
Malicious code in adxaa (npm)
Malicious code in @openrepl/shared (npm)
Malicious code in @openrepl/shared (npm)
Malicious code in fastly-vcl-language-client (npm)
Malicious code in fastly-vcl-language-client (npm)
Malicious code in akamaijs-sensorv1 (npm)
Malicious code in akamaijs-sensorv1 (npm)
Malicious code in require-i18next (npm)
Malicious code in require-i18next (npm)
Malicious code in harmony-app-toolkit (npm)
Malicious code in harmony-app-toolkit (npm)
Malicious code in @finaxis/common-js (npm)
Malicious code in @finaxis/common-js (npm)
Malicious code in svelte-goal-vim (npm)
Malicious code in svelte-goal-vim (npm)
Malicious code in depcruise-fmt (npm)
Malicious code in depcruise-fmt (npm)
Malicious code in gunzip-js (npm)
Malicious code in gunzip-js (npm)
Malicious code in depcruise-baseline (npm)
Malicious code in depcruise-baseline (npm)
Malicious code in depcruise-wrap-stream-in-html (npm)
Malicious code in depcruise-wrap-stream-in-html (npm)
Malicious code in kit-hydration-vim (npm)
Malicious code in kit-hydration-vim (npm)
Malicious code in game_overlay (npm)
Malicious code in game_overlay (npm)
Malicious code in alelo-services (npm)
Malicious code in alelo-services (npm)
Malicious code in alelo-client (npm)
Malicious code in alelo-client (npm)
Malicious code in datefmt-simple-utils (npm)
Malicious code in datefmt-simple-utils (npm)
Malicious code in saps_secplayground_npm_ai (npm)
Malicious code in saps_secplayground_npm_ai (npm)
Malicious code in elf-stats-cranberry-wishlist-933 (npm)
Malicious code in elf-stats-cranberry-wishlist-933 (npm)
Malicious code in npm_pkg_1094 (npm)
Malicious code in npm_pkg_1094 (npm)
Malicious code in hrp9871 (npm)
Malicious code in hrp9871 (npm)
Malicious code in @guangnao/agent-proxy (npm)
Malicious code in @guangnao/agent-proxy (npm)
Malicious code in elf-stats-caroling-stocking-510 (npm)
Malicious code in elf-stats-caroling-stocking-510 (npm)
Malicious code in @ferudionz/webautomation (npm)
Malicious code in @ferudionz/webautomation (npm)
Malicious code in @ghost_debugger/nanocache (npm)
Malicious code in @ghost_debugger/nanocache (npm)
Malicious code in @polymarkets/clob-client-v2 (npm)
Malicious code in @polymarkets/clob-client-v2 (npm)
Malicious code in @lodash-js/lodash-js (npm)
Malicious code in @lodash-js/lodash-js (npm)
Malicious code in @velliajs/discord (npm)
Malicious code in @velliajs/discord (npm)
Malicious code in @ferudionz/web_logger_js (npm)
Malicious code in @ferudionz/web_logger_js (npm)
Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpoints
Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpoints
Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist
Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist
Malicious code in @cdnshell/loader (npm)
Malicious code in @cdnshell/loader (npm)
Malicious code in @mexc/shared-utils (npm)
Malicious code in @mexc/shared-utils (npm)
Token Optimizer MCP: OS command injection in smart_user via username in get-user-info
Token Optimizer MCP: OS command injection in smart_user via username in get-user-info
Malicious code in @devmikets/hyperliquid-sdk (npm)
Malicious code in @devmikets/hyperliquid-sdk (npm)
Malicious code in axios-fast (npm)
Malicious code in axios-fast (npm)
Malicious code in @divineubg/divine (npm)
Malicious code in @divineubg/divine (npm)
Malicious code in @demopack/www (npm)
Malicious code in @demopack/www (npm)
Malicious code in @workoscalifant/sudoku-term (npm)
Malicious code in @workoscalifant/sudoku-term (npm)
Malicious code in alelo-common (npm)
Malicious code in alelo-common (npm)
Malicious code in alelo-core (npm)
Malicious code in alelo-core (npm)
Malicious code in tailwind-toolkit (npm)
Malicious code in tailwind-toolkit (npm)
Malicious code in notafollower1226 (npm)
Malicious code in notafollower1226 (npm)
Malicious code in tailwind-plugin-kit (npm)
Malicious code in tailwind-plugin-kit (npm)
Malicious code in meualelo (npm)
Malicious code in meualelo (npm)
Malicious code in alelo-api (npm)
Malicious code in alelo-api (npm)
Malicious code in fr-ito-web-react (npm)
Malicious code in fr-ito-web-react (npm)
Malicious code in bootstrap-custom-ui (npm)
Malicious code in bootstrap-custom-ui (npm)
Malicious code in notafollower122 (npm)
Malicious code in notafollower122 (npm)
Malicious code in alelo-utils (npm)
Malicious code in alelo-utils (npm)
Malicious code in alelo-sdk (npm)
Malicious code in alelo-sdk (npm)
Malicious code in datefmt-core-utils (npm)
Malicious code in datefmt-core-utils (npm)
Malicious code in alelo-payment (npm)
Malicious code in alelo-payment (npm)
Malicious code in notafollower1 (npm)
Malicious code in notafollower1 (npm)
Malicious code in alelo-auth (npm)
Malicious code in alelo-auth (npm)
Malicious code in google-logging-utils-internal (npm)
Malicious code in google-logging-utils-internal (npm)
Malicious code in hrp9872 (npm)
Malicious code in hrp9872 (npm)
Malicious code in @vyzensockets/baileys (npm)
Malicious code in @vyzensockets/baileys (npm)
Malicious code in expect-bundle (npm)
Malicious code in expect-bundle (npm)
Malicious code in npm_pkg_1093 (npm)
Malicious code in npm_pkg_1093 (npm)
Malicious code in dinotech-auth-utils (npm)
Malicious code in dinotech-auth-utils (npm)
Malicious code in mw-filesystem-events-nodream-es6 (npm)
Malicious code in mw-filesystem-events-nodream-es6 (npm)
Malicious code in ak-mal-test-poc (npm)
Malicious code in ak-mal-test-poc (npm)
Malicious code in nolimitcity (npm)
Malicious code in nolimitcity (npm)
Malicious code in heft-storybook-v6-react-tutorial-storykit (npm)
Malicious code in heft-storybook-v6-react-tutorial-storykit (npm)
Malicious code in utils-bundle (npm)
Malicious code in utils-bundle (npm)
Malicious code in rtms-manager-dev (npm)
Malicious code in rtms-manager-dev (npm)
Malicious code in @peptideventure/peptide-unit (npm)
Malicious code in @peptideventure/peptide-unit (npm)
Malicious code in pocbitbarrontest (npm)
Malicious code in pocbitbarrontest (npm)
Malicious code in @veertly/web-app (npm)
Malicious code in @veertly/web-app (npm)
Malicious code in rimo-env-validator (npm)
Malicious code in rimo-env-validator (npm)
Malicious code in thepackagethatworks_ (npm)
Malicious code in thepackagethatworks_ (npm)
Malicious code in zip-bundle (npm)
Malicious code in zip-bundle (npm)
Malicious code in sui-gql-lite (npm)
Malicious code in sui-gql-lite (npm)
Malicious code in @peptideventure/peptide-score-modifier (npm)
Malicious code in @peptideventure/peptide-score-modifier (npm)
Malicious code in bcs-mini (npm)
Malicious code in bcs-mini (npm)
Malicious code in resource-lease-pool (npm)
Malicious code in resource-lease-pool (npm)
Malicious code in async-critical-section (npm)
Malicious code in async-critical-section (npm)
Malicious code in mutex-forge (npm)
Malicious code in mutex-forge (npm)
Malicious code in lock-deadline-guard (npm)
Malicious code in lock-deadline-guard (npm)
Malicious code in @nolimit-agent/linux-x64 (npm)
Malicious code in @nolimit-agent/linux-x64 (npm)
Malicious code in bs58-77 (npm)
Malicious code in bs58-77 (npm)
Malicious code in priority-mutex-lane (npm)
Malicious code in priority-mutex-lane (npm)
Malicious code in try-lock-runner (npm)
Malicious code in try-lock-runner (npm)
Malicious code in path-match-js (npm)
Malicious code in path-match-js (npm)
Malicious code in single-flight-lock (npm)
Malicious code in single-flight-lock (npm)
Malicious code in @nolimit-agent/win32-x64 (npm)
Malicious code in @nolimit-agent/win32-x64 (npm)
Malicious code in keyed-mutex-map (npm)
Malicious code in keyed-mutex-map (npm)
Malicious code in shared-slot-gate (npm)
Malicious code in shared-slot-gate (npm)
Malicious code in source-analyzer (npm)
Malicious code in source-analyzer (npm)
Malicious code in bs58-33 (npm)
Malicious code in bs58-33 (npm)
Malicious code in semaphore-job-pool (npm)
Malicious code in semaphore-job-pool (npm)
Malicious code in async-lock-queue (npm)
Malicious code in async-lock-queue (npm)
Malicious code in root-locator (npm)
Malicious code in root-locator (npm)
Malicious code in react-shield (npm)
Malicious code in react-shield (npm)
Malicious code in knip-bun (npm)
Malicious code in knip-bun (npm)
Malicious code in napi-raw (npm)
Malicious code in napi-raw (npm)
Malicious code in velora-kit (npm)
Malicious code in velora-kit (npm)
Malicious code in eslint-generate-release (npm)
Malicious code in eslint-generate-release (npm)
Malicious code in check-audit (npm)
Malicious code in check-audit (npm)
Malicious code in eslint-publish-release (npm)
Malicious code in eslint-publish-release (npm)
Malicious code in index-design-system (npm)
Malicious code in index-design-system (npm)
Malicious code in ai-analyzer (npm)
Malicious code in ai-analyzer (npm)
Malicious code in @caspianph/first-npm-package (npm)
Malicious code in @caspianph/first-npm-package (npm)
Malicious code in ts-enum-helper (npm)
Malicious code in ts-enum-helper (npm)
Malicious code in @secauditb20y/sec-test-r3b (npm)
Malicious code in @secauditb20y/sec-test-r3b (npm)
Malicious code in @caspianph/third-npm-package (npm)
Malicious code in @caspianph/third-npm-package (npm)
Malicious code in @hzero-front-ui/hzero-ui (npm)
Malicious code in @hzero-front-ui/hzero-ui (npm)
Malicious code in @khaznatech/common (npm)
Malicious code in @khaznatech/common (npm)
Malicious code in @hzero-front-ui/core (npm)
Malicious code in @hzero-front-ui/core (npm)
Malicious code in node-config-svg-contract (npm)
Malicious code in node-config-svg-contract (npm)
Malicious code in fmt-util-k7x2 (npm)
Malicious code in fmt-util-k7x2 (npm)
Malicious code in xrblocks-mcp (npm)
Malicious code in xrblocks-mcp (npm)
Malicious code in webautomation_js (npm)
Malicious code in webautomation_js (npm)
Malicious code in @hzero-front-ui/cfg (npm)
Malicious code in @hzero-front-ui/cfg (npm)
Malicious code in @hzero-front-ui/themes (npm)
Malicious code in @hzero-front-ui/themes (npm)
Malicious code in @jacksher/install-exec-poc (npm)
Malicious code in @jacksher/install-exec-poc (npm)
Malicious code in @dsp-next-gen-ui/needs-review (npm)
Malicious code in @dsp-next-gen-ui/needs-review (npm)
Malicious code in @hzero-front-ui/c7n-ui (npm)
Malicious code in @hzero-front-ui/c7n-ui (npm)
Malicious code in nc-verify-127942 (npm)
Malicious code in nc-verify-127942 (npm)
Malicious code in cspell-esm (npm)
Malicious code in cspell-esm (npm)
Malicious code in tizen-webdriver-cli (npm)
Malicious code in tizen-webdriver-cli (npm)
Malicious code in @khaznatech/core (npm)
Malicious code in @khaznatech/core (npm)
Malicious code in bs58-15 (npm)
Malicious code in bs58-15 (npm)
Malicious code in finvu-hdfc-sdk (npm)
Malicious code in finvu-hdfc-sdk (npm)
Malicious code in preinstall-hook-webhook-callback-demo (npm)
Malicious code in preinstall-hook-webhook-callback-demo (npm)
Malicious code in @caspianph/second-npm-package (npm)
Malicious code in @caspianph/second-npm-package (npm)
Malicious code in blocks-angular (npm)
Malicious code in blocks-angular (npm)
Malicious code in eslint-generate-prerelease (npm)
Malicious code in eslint-generate-prerelease (npm)
Malicious code in wct-st (npm)
Malicious code in wct-st (npm)
Malicious code in @khaznatech/utils (npm)
Malicious code in @khaznatech/utils (npm)
Malicious code in notafollower (npm)
Malicious code in notafollower (npm)
Malicious code in resolve-audit (npm)
Malicious code in resolve-audit (npm)
Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS
Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS
Malicious code in in-install (npm)
Malicious code in in-install (npm)
Malicious code in prediction-trader (npm)
Malicious code in prediction-trader (npm)
Malicious code in date-fmt-utils-helper (npm)
Malicious code in date-fmt-utils-helper (npm)
Malicious code in global-intel (npm)
Malicious code in global-intel (npm)
Malicious code in process-live-log (npm)
Malicious code in process-live-log (npm)
Malicious code in vexium-kit (npm)
Malicious code in vexium-kit (npm)
Malicious code in chai-as-reformed (npm)
Malicious code in chai-as-reformed (npm)
Malicious code in cilm-ui-commons (npm)
Malicious code in cilm-ui-commons (npm)
Malicious code in date-fmt-helper-xz (npm)
Malicious code in date-fmt-helper-xz (npm)
Malicious code in debug-proxy-chrome-devtools (npm)
Malicious code in debug-proxy-chrome-devtools (npm)
Malicious code in ventra-kit (npm)
Malicious code in ventra-kit (npm)
Malicious code in @leonardo0902/vortex-kit (npm)
Malicious code in @leonardo0902/vortex-kit (npm)
Malicious code in postcss-initialize-plugin (npm)
Malicious code in postcss-initialize-plugin (npm)
Malicious code in power-assert-plus (npm)
Malicious code in power-assert-plus (npm)
Malicious code in @kolbo/mcp (npm)
Malicious code in @kolbo/mcp (npm)
Malicious code in copytrade-core (npm)
Malicious code in copytrade-core (npm)
Malicious code in minimalistic-assert-plus (npm)
Malicious code in minimalistic-assert-plus (npm)
Malicious code in @ethers-js/contracts (npm)
Malicious code in @ethers-js/contracts (npm)
Malicious code in @solana-js/web3 (npm)
Malicious code in @solana-js/web3 (npm)
Malicious code in external-process-live-log (npm)
Malicious code in external-process-live-log (npm)
Malicious code in functions-framework-nodejs (npm)
Malicious code in functions-framework-nodejs (npm)
Malicious code in @opezneppelin/contracts (npm)
Malicious code in @opezneppelin/contracts (npm)
Malicious code in js-assert-plus (npm)
Malicious code in js-assert-plus (npm)
Malicious code in datetime-format-xutil (npm)
Malicious code in datetime-format-xutil (npm)
Malicious code in npm-hex-utils (npm)
Malicious code in npm-hex-utils (npm)
Malicious code in datetime-fmt-xutil (npm)
Malicious code in datetime-fmt-xutil (npm)
Malicious code in core-js-buffer (npm)
Malicious code in core-js-buffer (npm)
ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite
ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite
ep_etherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header
ep_etherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header
ep_etherpad-lite: Device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token
ep_etherpad-lite: Device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token
Malicious code in datefmt-util-helper (npm)
Malicious code in datefmt-util-helper (npm)
hashi-vault-js: Vault token and secret values exposed in thrown errors
hashi-vault-js: Vault token and secret values exposed in thrown errors
Malicious code in airdzticket (npm)
Malicious code in airdzticket (npm)
Malicious code in bmgki3g6fh3 (npm)
Malicious code in bmgki3g6fh3 (npm)
Malicious code in dzvchorehui2 (npm)
Malicious code in dzvchorehui2 (npm)
Malicious code in hgdvfuflnb (npm)
Malicious code in hgdvfuflnb (npm)
Malicious code in @years17/n8n-nodes-utils-helper-e (npm)
Malicious code in @years17/n8n-nodes-utils-helper-e (npm)
Malicious code in @years18/n8n-nodes-utils-helper-q (npm)
Malicious code in @years18/n8n-nodes-utils-helper-q (npm)
Malicious code in clxofwfjskaz7 (npm)
Malicious code in clxofwfjskaz7 (npm)
Malicious code in @years17/n8n-nodes-utils-helper-d (npm)
Malicious code in @years17/n8n-nodes-utils-helper-d (npm)
Malicious code in @years17/n8n-nodes-utils-helper-i (npm)
Malicious code in @years17/n8n-nodes-utils-helper-i (npm)
Malicious code in @years18/n8n-nodes-utils-helper-x (npm)
Malicious code in @years18/n8n-nodes-utils-helper-x (npm)
Malicious code in @years18/n8n-nodes-utils-helper-n (npm)
Malicious code in @years18/n8n-nodes-utils-helper-n (npm)
Malicious code in @years18/n8n-nodes-utils-helper-b (npm)
Malicious code in @years18/n8n-nodes-utils-helper-b (npm)
Malicious code in @years18/n8n-nodes-utils-helper-a (npm)
Malicious code in @years18/n8n-nodes-utils-helper-a (npm)
Malicious code in @years18/n8n-nodes-utils-helper-k (npm)
Malicious code in @years18/n8n-nodes-utils-helper-k (npm)
Malicious code in @years18/n8n-nodes-utils-helper-c (npm)
Malicious code in @years18/n8n-nodes-utils-helper-c (npm)
Malicious code in @years17/n8n-nodes-utils-helper-f (npm)
Malicious code in @years17/n8n-nodes-utils-helper-f (npm)
Malicious code in @years18/n8n-nodes-utils-helper-w (npm)
Malicious code in @years18/n8n-nodes-utils-helper-w (npm)
Malicious code in @years18/n8n-nodes-utils-helper-m (npm)
Malicious code in @years18/n8n-nodes-utils-helper-m (npm)
Malicious code in @years18/n8n-nodes-utils-helper-f (npm)
Malicious code in @years18/n8n-nodes-utils-helper-f (npm)
Malicious code in @years18/n8n-nodes-utils-helper-r (npm)
Malicious code in @years18/n8n-nodes-utils-helper-r (npm)
Malicious code in @years18/n8n-nodes-utils-helper-o (npm)
Malicious code in @years18/n8n-nodes-utils-helper-o (npm)
Malicious code in @years18/n8n-nodes-utils-helper-s (npm)
Malicious code in @years18/n8n-nodes-utils-helper-s (npm)
Malicious code in @years18/n8n-nodes-utils-helper-d (npm)
Malicious code in @years18/n8n-nodes-utils-helper-d (npm)
Malicious code in twcvhjlksdmx (npm)
Malicious code in twcvhjlksdmx (npm)
Malicious code in biklimaster (npm)
Malicious code in biklimaster (npm)
Malicious code in bikliwrapper (npm)
Malicious code in bikliwrapper (npm)
Malicious code in egypt0811 (npm)
Malicious code in egypt0811 (npm)
Malicious code in passport811 (npm)
Malicious code in passport811 (npm)
Malicious code in @years18/n8n-nodes-utils-helper-g (npm)
Malicious code in @years18/n8n-nodes-utils-helper-g (npm)
Malicious code in @years18/n8n-nodes-utils-helper-t (npm)
Malicious code in @years18/n8n-nodes-utils-helper-t (npm)
Malicious code in @years18/n8n-nodes-utils-helper-e (npm)
Malicious code in @years18/n8n-nodes-utils-helper-e (npm)
Malicious code in @years18/n8n-nodes-utils-helper-j (npm)
Malicious code in @years18/n8n-nodes-utils-helper-j (npm)
Malicious code in @years18/n8n-nodes-utils-helper-v (npm)
Malicious code in @years18/n8n-nodes-utils-helper-v (npm)
Malicious code in @years18/n8n-nodes-utils-helper-p (npm)
Malicious code in @years18/n8n-nodes-utils-helper-p (npm)
Malicious code in @years18/n8n-nodes-utils-helper-l (npm)
Malicious code in @years18/n8n-nodes-utils-helper-l (npm)
Malicious code in @noxzacode/eslint-config (npm)
Malicious code in @noxzacode/eslint-config (npm)
Malicious code in @years18/n8n-nodes-utils-helper-u (npm)
Malicious code in @years18/n8n-nodes-utils-helper-u (npm)
Malicious code in dzcvhfruwluwe (npm)
Malicious code in dzcvhfruwluwe (npm)
Malicious code in @noxzacode/libsignal-node (npm)
Malicious code in @noxzacode/libsignal-node (npm)
Malicious code in cvjwyinkpas (npm)
Malicious code in cvjwyinkpas (npm)
Malicious code in bcs-compact (npm)
Malicious code in bcs-compact (npm)
Malicious code in internallib_v756 (npm)
Malicious code in internallib_v756 (npm)
Malicious code in internallib_v392 (npm)
Malicious code in internallib_v392 (npm)
Malicious code in @years20/n8n-nodes-utils-helper-i (npm)
Malicious code in @years20/n8n-nodes-utils-helper-i (npm)
Malicious code in kit-map-vim (npm)
Malicious code in kit-map-vim (npm)
Malicious code in @years20/n8n-nodes-utils-helper-h (npm)
Malicious code in @years20/n8n-nodes-utils-helper-h (npm)
Malicious code in envpack-conf (npm)
Malicious code in envpack-conf (npm)
Malicious code in passkeys-react (npm)
Malicious code in passkeys-react (npm)
Malicious code in @years20/n8n-nodes-utils-helper-g (npm)
Malicious code in @years20/n8n-nodes-utils-helper-g (npm)
Malicious code in bb-twl-k7x2 (npm)
Malicious code in bb-twl-k7x2 (npm)
Malicious code in tailwind-form-templates (npm)
Malicious code in tailwind-form-templates (npm)
Malicious code in @years19/n8n-nodes-utils-helper-r (npm)
Malicious code in @years19/n8n-nodes-utils-helper-r (npm)
Malicious code in @years20/n8n-nodes-utils-helper-f (npm)
Malicious code in @years20/n8n-nodes-utils-helper-f (npm)
Malicious code in @years19/n8n-nodes-utils-helper-k (npm)
Malicious code in @years19/n8n-nodes-utils-helper-k (npm)
Malicious code in @years19/n8n-nodes-utils-helper-d (npm)
Malicious code in @years19/n8n-nodes-utils-helper-d (npm)
Malicious code in @years19/n8n-nodes-utils-helper-y (npm)
Malicious code in @years19/n8n-nodes-utils-helper-y (npm)
Malicious code in @years19/n8n-nodes-utils-helper-i (npm)
Malicious code in @years19/n8n-nodes-utils-helper-i (npm)
Malicious code in @years20/n8n-nodes-utils-helper-e (npm)
Malicious code in @years20/n8n-nodes-utils-helper-e (npm)
Malicious code in @years19/n8n-nodes-utils-helper-v (npm)
Malicious code in @years19/n8n-nodes-utils-helper-v (npm)
Malicious code in @years20/n8n-nodes-utils-helper-d (npm)
Malicious code in @years20/n8n-nodes-utils-helper-d (npm)
Malicious code in @years19/n8n-nodes-utils-helper-g (npm)
Malicious code in @years19/n8n-nodes-utils-helper-g (npm)
Malicious code in @years18/n8n-nodes-utils-helper-y (npm)
Malicious code in @years18/n8n-nodes-utils-helper-y (npm)
Malicious code in @years19/n8n-nodes-utils-helper-j (npm)
Malicious code in @years19/n8n-nodes-utils-helper-j (npm)
Malicious code in @years19/n8n-nodes-utils-helper-q (npm)
Malicious code in @years19/n8n-nodes-utils-helper-q (npm)
Malicious code in @years19/n8n-nodes-utils-helper-u (npm)
Malicious code in @years19/n8n-nodes-utils-helper-u (npm)
Malicious code in @years19/n8n-nodes-utils-helper-p (npm)
Malicious code in @years19/n8n-nodes-utils-helper-p (npm)
Malicious code in @years20/n8n-nodes-utils-helper-c (npm)
Malicious code in @years20/n8n-nodes-utils-helper-c (npm)
Malicious code in @years19/n8n-nodes-utils-helper-s (npm)
Malicious code in @years19/n8n-nodes-utils-helper-s (npm)
Malicious code in @years19/n8n-nodes-utils-helper-t (npm)
Malicious code in @years19/n8n-nodes-utils-helper-t (npm)
Malicious code in @years20/n8n-nodes-utils-helper-a (npm)
Malicious code in @years20/n8n-nodes-utils-helper-a (npm)
Malicious code in @years19/n8n-nodes-utils-helper-e (npm)
Malicious code in @years19/n8n-nodes-utils-helper-e (npm)
Malicious code in @years19/n8n-nodes-utils-helper-a (npm)
Malicious code in @years19/n8n-nodes-utils-helper-a (npm)
Malicious code in @years20/n8n-nodes-utils-helper-b (npm)
Malicious code in @years20/n8n-nodes-utils-helper-b (npm)
Malicious code in @years19/n8n-nodes-utils-helper-f (npm)
Malicious code in @years19/n8n-nodes-utils-helper-f (npm)
Malicious code in @years19/n8n-nodes-utils-helper-m (npm)
Malicious code in @years19/n8n-nodes-utils-helper-m (npm)
Malicious code in @years19/n8n-nodes-utils-helper-b (npm)
Malicious code in @years19/n8n-nodes-utils-helper-b (npm)
Malicious code in @years19/n8n-nodes-utils-helper-x (npm)
Malicious code in @years19/n8n-nodes-utils-helper-x (npm)
Malicious code in @years19/n8n-nodes-utils-helper-l (npm)
Malicious code in @years19/n8n-nodes-utils-helper-l (npm)
Malicious code in @years19/n8n-nodes-utils-helper-n (npm)
Malicious code in @years19/n8n-nodes-utils-helper-n (npm)
Malicious code in unitel3 (npm)
Malicious code in unitel3 (npm)
Malicious code in vczxijghsvizu4 (npm)
Malicious code in vczxijghsvizu4 (npm)
Malicious code in @years19/n8n-nodes-utils-helper-h (npm)
Malicious code in @years19/n8n-nodes-utils-helper-h (npm)
Malicious code in verify-cli (npm)
Malicious code in verify-cli (npm)
Malicious code in @assetshop/verify-cli (npm)
Malicious code in @assetshop/verify-cli (npm)
Malicious code in xcnvjfsiewlk9 (npm)
Malicious code in xcnvjfsiewlk9 (npm)
Malicious code in @years19/n8n-nodes-utils-helper-c (npm)
Malicious code in @years19/n8n-nodes-utils-helper-c (npm)
Malicious code in @years19/n8n-nodes-utils-helper-o (npm)
Malicious code in @years19/n8n-nodes-utils-helper-o (npm)
Malicious code in truecxikdsal (npm)
Malicious code in truecxikdsal (npm)
Malicious code in vlbhvgovbbhfab (npm)
Malicious code in vlbhvgovbbhfab (npm)
Malicious code in mnzjgxciwadk (npm)
Malicious code in mnzjgxciwadk (npm)
Malicious code in @years20/n8n-nodes-utils-helper-j (npm)
Malicious code in @years20/n8n-nodes-utils-helper-j (npm)
Malicious code in xhjckswqivb (npm)
Malicious code in xhjckswqivb (npm)
Malicious code in mobicwkgjmx (npm)
Malicious code in mobicwkgjmx (npm)
Malicious code in thundertiger (npm)
Malicious code in thundertiger (npm)
Malicious code in ms_aidc_com_tw (npm)
Malicious code in ms_aidc_com_tw (npm)
Malicious code in vkldhcmieru6 (npm)
Malicious code in vkldhcmieru6 (npm)
Malicious code in prezdentkxheiw (npm)
Malicious code in prezdentkxheiw (npm)
Malicious code in @years19/n8n-nodes-utils-helper-w (npm)
Malicious code in @years19/n8n-nodes-utils-helper-w (npm)
Malicious code in nihzvdeowx5 (npm)
Malicious code in nihzvdeowx5 (npm)
Malicious code in noxleys (npm)
Malicious code in noxleys (npm)
Malicious code in khanbmnxls (npm)
Malicious code in khanbmnxls (npm)
Malicious code in mnchfnvbue1 (npm)
Malicious code in mnchfnvbue1 (npm)
Malicious code in @years17/n8n-nodes-utils-helper-h (npm)
Malicious code in @years17/n8n-nodes-utils-helper-h (npm)
Malicious code in mnteckets (npm)
Malicious code in mnteckets (npm)
Malicious code in yangming8 (npm)
Malicious code in yangming8 (npm)
Malicious code in yangming708 (npm)
Malicious code in yangming708 (npm)
Malicious code in @bikli/cli (npm)
Malicious code in @bikli/cli (npm)
Malicious code in cvvkshuelwiu (npm)
Malicious code in cvvkshuelwiu (npm)
Malicious code in nhdxzthponv5 (npm)
Malicious code in nhdxzthponv5 (npm)
Malicious code in mnhdjoweuq (npm)
Malicious code in mnhdjoweuq (npm)
Malicious code in mobicommn (npm)
Malicious code in mobicommn (npm)
Malicious code in fghvbmniwu (npm)
Malicious code in fghvbmniwu (npm)
Malicious code in bgncvhferucfds (npm)
Malicious code in bgncvhferucfds (npm)
Malicious code in @years17/n8n-nodes-utils-helper-c (npm)
Malicious code in @years17/n8n-nodes-utils-helper-c (npm)
Malicious code in mcp-util-helpers (npm)
Malicious code in mcp-util-helpers (npm)
Malicious code in @bikli/bikli (npm)
Malicious code in @bikli/bikli (npm)
Malicious code in mnmobicom (npm)
Malicious code in mnmobicom (npm)
Malicious code in hfkcdyuwbdx1 (npm)
Malicious code in hfkcdyuwbdx1 (npm)
Malicious code in china_airlines (npm)
Malicious code in china_airlines (npm)
Malicious code in unitel4 (npm)
Malicious code in unitel4 (npm)
Malicious code in bgzxcuite2 (npm)
Malicious code in bgzxcuite2 (npm)
Malicious code in hngfykuvgh4 (npm)
Malicious code in hngfykuvgh4 (npm)
Malicious code in kanyut (npm)
Malicious code in kanyut (npm)
Malicious code in fhj8cv9dkwm4 (npm)
Malicious code in fhj8cv9dkwm4 (npm)
Malicious code in vfgnhlkxchrd (npm)
Malicious code in vfgnhlkxchrd (npm)
Malicious code in biklirouter (npm)
Malicious code in biklirouter (npm)
Malicious code in dhjksficgwu2 (npm)
Malicious code in dhjksficgwu2 (npm)
Malicious code in bcnfjndwbkf2 (npm)
Malicious code in bcnfjndwbkf2 (npm)
Malicious code in cvbmxiowkwqla6 (npm)
Malicious code in cvbmxiowkwqla6 (npm)
Malicious code in @years17/n8n-nodes-utils-helper-b (npm)
Malicious code in @years17/n8n-nodes-utils-helper-b (npm)
Malicious code in @years17/n8n-nodes-utils-helper (npm)
Malicious code in @years17/n8n-nodes-utils-helper (npm)
Malicious code in gdwkh6vcbu (npm)
Malicious code in gdwkh6vcbu (npm)
Malicious code in bvdfhdfvnk3 (npm)
Malicious code in bvdfhdfvnk3 (npm)
Malicious code in cvmbxcjiasdg (npm)
Malicious code in cvmbxcjiasdg (npm)
Malicious code in hlksdcixycvf (npm)
Malicious code in hlksdcixycvf (npm)
Malicious code in hcfguyfrmblp (npm)
Malicious code in hcfguyfrmblp (npm)
Malicious code in jkbnwsdf8 (npm)
Malicious code in jkbnwsdf8 (npm)
Malicious code in cxcbdjxcmncvfg2 (npm)
Malicious code in cxcbdjxcmncvfg2 (npm)
Malicious code in egair0810 (npm)
Malicious code in egair0810 (npm)
Malicious code in fdhcvriwecv3 (npm)
Malicious code in fdhcvriwecv3 (npm)
Malicious code in chmjdsidwlf5 (npm)
Malicious code in chmjdsidwlf5 (npm)
Malicious code in @years17/n8n-nodes-utils-helper-g (npm)
Malicious code in @years17/n8n-nodes-utils-helper-g (npm)
Malicious code in @years17/n8n-nodes-helper-utils (npm)
Malicious code in @years17/n8n-nodes-helper-utils (npm)
Malicious code in cjdfswifuem3 (npm)
Malicious code in cjdfswifuem3 (npm)
Malicious code in cvbniydplwe3 (npm)
Malicious code in cvbniydplwe3 (npm)
Malicious code in hxckdoeaqjlc8 (npm)
Malicious code in hxckdoeaqjlc8 (npm)
Malicious code in csbcldfvivwfgd4 (npm)
Malicious code in csbcldfvivwfgd4 (npm)
Malicious code in jhkxcixudnvm1 (npm)
Malicious code in jhkxcixudnvm1 (npm)
Malicious code in cc-skills-helper (npm)
Malicious code in cc-skills-helper (npm)
Malicious code in sui-gql (npm)
Malicious code in sui-gql (npm)
Malicious code in svelte-kit-vim (npm)
Malicious code in svelte-kit-vim (npm)
Malicious code in dakumangalsingh (npm)
Malicious code in dakumangalsingh (npm)
Malicious code in camelot-ammv2-periphery (npm)
Malicious code in camelot-ammv2-periphery (npm)
Malicious code in bs58-12 (npm)
Malicious code in bs58-12 (npm)
Malicious code in internallib_v164 (npm)
Malicious code in internallib_v164 (npm)
Malicious code in bs58-11 (npm)
Malicious code in bs58-11 (npm)
Malicious code in permit2 (npm)
Malicious code in permit2 (npm)
Malicious code in developer-dashboard (npm)
Malicious code in developer-dashboard (npm)
Malicious code in bs58-13 (npm)
Malicious code in bs58-13 (npm)
Malicious code in @openzeppelin-5/contracts (npm)
Malicious code in @openzeppelin-5/contracts (npm)
Malicious code in @openzeppelin-4/contracts (npm)
Malicious code in @openzeppelin-4/contracts (npm)
Malicious code in @telekom-ods/react-ui-kit (npm)
Malicious code in @telekom-ods/react-ui-kit (npm)
Malicious code in @aerodrome-finance/slipstream (npm)
Malicious code in @aerodrome-finance/slipstream (npm)
Malicious code in @aerodrome-finance/contracts (npm)
Malicious code in @aerodrome-finance/contracts (npm)
Malicious code in ghazaly (npm)
Malicious code in ghazaly (npm)
Malicious code in ethereum-vault-connector (npm)
Malicious code in ethereum-vault-connector (npm)
Malicious code in kit-vim-map (npm)
Malicious code in kit-vim-map (npm)
Malicious code in base65-11x (npm)
Malicious code in base65-11x (npm)
Malicious code in dependencyfsdsfdsfg (npm)
Malicious code in dependencyfsdsfdsfg (npm)
Malicious code in base65-12x (npm)
Malicious code in base65-12x (npm)
Malicious code in base65-15x (npm)
Malicious code in base65-15x (npm)
Malicious code in base65-13x (npm)
Malicious code in base65-13x (npm)
Malicious code in @nzeros/codebreak (npm)
Malicious code in @nzeros/codebreak (npm)
Malicious code in safe-local-env-loader (npm)
Malicious code in safe-local-env-loader (npm)
Malicious code in dcfarguscert (npm)
Malicious code in dcfarguscert (npm)
Malicious code in bjm-low-code-components (npm)
Malicious code in bjm-low-code-components (npm)
Malicious code in whs4_ued (npm)
Malicious code in whs4_ued (npm)
Malicious code in chapters-core (npm)
Malicious code in chapters-core (npm)
Malicious code in base65-33x (npm)
Malicious code in base65-33x (npm)
Malicious code in zeal-rq-hooks (npm)
Malicious code in zeal-rq-hooks (npm)
Malicious code in newtun (npm)
Malicious code in newtun (npm)
Malicious code in base65-77x (npm)
Malicious code in base65-77x (npm)
Malicious code in @dgn-src-click-to-pay-org/srcdcfreleasecert (npm)
Malicious code in @dgn-src-click-to-pay-org/srcdcfreleasecert (npm)
Malicious code in sui-bcs-codec (npm)
Malicious code in sui-bcs-codec (npm)
Malicious code in sui-gql-client (npm)
Malicious code in sui-gql-client (npm)
Malicious code in boring-vault (npm)
Malicious code in boring-vault (npm)
Malicious code in lines-columns (npm)
Malicious code in lines-columns (npm)
Malicious code in svelte-vim-kit (npm)
Malicious code in svelte-vim-kit (npm)
Malicious code in upshift-finance (npm)
Malicious code in upshift-finance (npm)
Malicious code in fetch-runtime (npm)
Malicious code in fetch-runtime (npm)
Malicious code in node-internal-svg-loader (npm)
Malicious code in node-internal-svg-loader (npm)
Malicious code in upshift-config (npm)
Malicious code in upshift-config (npm)
Malicious code in augustdigital-sdk (npm)
Malicious code in augustdigital-sdk (npm)
Malicious code in dakumangalsingh_virus (npm)
Malicious code in dakumangalsingh_virus (npm)
Malicious code in camelot-ammv2-core (npm)
Malicious code in camelot-ammv2-core (npm)
Malicious code in hex-encode-utils (npm)
Malicious code in hex-encode-utils (npm)
Malicious code in @kuperka/chainguard-sdk (npm)
Malicious code in @kuperka/chainguard-sdk (npm)
Malicious code in @sqlite-table/schema-generator (npm)
Malicious code in @sqlite-table/schema-generator (npm)
Malicious code in @sqlite-table/sql-creator (npm)
Malicious code in @sqlite-table/sql-creator (npm)
Malicious code in iconova-react (npm)
Malicious code in iconova-react (npm)
Malicious code in chai-as-deployer (npm)
Malicious code in chai-as-deployer (npm)
Malicious code in kit-map-streak (npm)
Malicious code in kit-map-streak (npm)
Malicious code in postcss-initial-provider (npm)
Malicious code in postcss-initial-provider (npm)
Malicious code in neverthrow-js (npm)
Malicious code in neverthrow-js (npm)
Malicious code in chai-as-format (npm)
Malicious code in chai-as-format (npm)
Malicious code in chai-as-bench (npm)
Malicious code in chai-as-bench (npm)
Malicious code in chai-as-promised-plus (npm)
Malicious code in chai-as-promised-plus (npm)
Malicious code in @rblxts/services (npm)
Malicious code in @rblxts/services (npm)
Malicious code in xerohub-discord-voice (npm)
Malicious code in xerohub-discord-voice (npm)
Malicious code in polymarket-stake-mathss (npm)
Malicious code in polymarket-stake-mathss (npm)
Malicious code in chai-tracker (npm)
Malicious code in chai-tracker (npm)
Malicious code in chai-as-map (npm)
Malicious code in chai-as-map (npm)
Malicious code in @noobaihome/amis-simple-area-widget (npm)
Malicious code in @noobaihome/amis-simple-area-widget (npm)
Malicious code in chai-jsonss (npm)
Malicious code in chai-jsonss (npm)
Malicious code in simple-date-formatter-new-10 (npm)
Malicious code in simple-date-formatter-new-10 (npm)
Malicious code in simple-date-formatter-new-9 (npm)
Malicious code in simple-date-formatter-new-9 (npm)
Malicious code in cryptostock (npm)
Malicious code in cryptostock (npm)
Malicious code in @ssgw/icon (npm)
Malicious code in @ssgw/icon (npm)
Malicious code in tokocrytodev (npm)
Malicious code in tokocrytodev (npm)
Malicious code in @noobaihome/amis-uni-area-widget (npm)
Malicious code in @noobaihome/amis-uni-area-widget (npm)
Malicious code in spoint (npm)
Malicious code in spoint (npm)
Malicious code in tailwind-elements-ui (npm)
Malicious code in tailwind-elements-ui (npm)
Malicious code in eth-library-utils (npm)
Malicious code in eth-library-utils (npm)
Malicious code in commonjs-assertion (npm)
Malicious code in commonjs-assertion (npm)
Malicious code in @sqlite-prime/createsql (npm)
Malicious code in @sqlite-prime/createsql (npm)
Malicious code in eth-library-toolkit (npm)
Malicious code in eth-library-toolkit (npm)
Malicious code in @sqlite-labs/createsql (npm)
Malicious code in @sqlite-labs/createsql (npm)
Malicious code in env-local (npm)
Malicious code in env-local (npm)
Malicious code in @sqlite-labs/nodesql (npm)
Malicious code in @sqlite-labs/nodesql (npm)
Malicious code in svelte-kit-streak (npm)
Malicious code in svelte-kit-streak (npm)
Malicious code in fsbrowse (npm)
Malicious code in fsbrowse (npm)
Malicious code in godot-kit (npm)
Malicious code in godot-kit (npm)
Malicious code in @sqlite-prime/nodesql (npm)
Malicious code in @sqlite-prime/nodesql (npm)
Malicious code in @dgxeon13/libsignal-node (npm)
Malicious code in @dgxeon13/libsignal-node (npm)
Malicious code in @dreamguyxeon/libsignal-node (npm)
Malicious code in @dreamguyxeon/libsignal-node (npm)
Malicious code in @dreamguyxeon/baileyx (npm)
Malicious code in @dreamguyxeon/baileyx (npm)
Malicious code in my-auto-follow (npm)
Malicious code in my-auto-follow (npm)
Malicious code in map-streak-kit (npm)
Malicious code in map-streak-kit (npm)
Malicious code in test-noexist-xyz-99 (npm)
Malicious code in test-noexist-xyz-99 (npm)
Malicious code in statist-browser-typed-client-eventea.projects.pwahelp (npm)
Malicious code in statist-browser-typed-client-eventea.projects.pwahelp (npm)
Malicious code in svelte-kit-cache (npm)
Malicious code in svelte-kit-cache (npm)
Malicious code in statist-browser-typed-client-eventea.projects.tdeal (npm)
Malicious code in statist-browser-typed-client-eventea.projects.tdeal (npm)
Malicious code in statist-browser-typed-client-eventea.projects.pwainsurance (npm)
Malicious code in statist-browser-typed-client-eventea.projects.pwainsurance (npm)
Malicious code in statist-browser-typed-client-eventea.projects.pwakasko (npm)
Malicious code in statist-browser-typed-client-eventea.projects.pwakasko (npm)
Malicious code in @rbx-ts/services (npm)
Malicious code in @rbx-ts/services (npm)
Malicious code in statist-browser-typed-client-eventea.projects.pwafamily (npm)
Malicious code in statist-browser-typed-client-eventea.projects.pwafamily (npm)
Malicious code in statist-browser-typed-client-eventea.projects.tdevice (npm)
Malicious code in statist-browser-typed-client-eventea.projects.tdevice (npm)
Malicious code in specials-resources-server (npm)
Malicious code in specials-resources-server (npm)
Malicious code in svelte-streak-kit (npm)
Malicious code in svelte-streak-kit (npm)
Malicious code in sme-rko-finance-front-operations-feed-impl (npm)
Malicious code in sme-rko-finance-front-operations-feed-impl (npm)
Malicious code in sme-rko-finance-front-operations-domain (npm)
Malicious code in sme-rko-finance-front-operations-domain (npm)
Malicious code in localization-fixer (npm)
Malicious code in localization-fixer (npm)
Malicious code in sme-rko-finance-front-operations-other (npm)
Malicious code in sme-rko-finance-front-operations-other (npm)
Malicious code in modern-localization (npm)
Malicious code in modern-localization (npm)
Malicious code in sme-rko-finance-front-operations-notifications-impl (npm)
Malicious code in sme-rko-finance-front-operations-notifications-impl (npm)
Malicious code in sme-rko-finance-front-operations-feed-models (npm)
Malicious code in sme-rko-finance-front-operations-feed-models (npm)
Malicious code in sme-rko-finance-front-operations-notifications-models (npm)
Malicious code in sme-rko-finance-front-operations-notifications-models (npm)
Malicious code in sme-rko-finance-front-operations-holding-domain (npm)
Malicious code in sme-rko-finance-front-operations-holding-domain (npm)
Malicious code in sme-rko-finance-front-operations-fee (npm)
Malicious code in sme-rko-finance-front-operations-fee (npm)
Malicious code in sme-rko-finance-front-payments-domain (npm)
Malicious code in sme-rko-finance-front-payments-domain (npm)
Malicious code in sme-rko-finance-front-operations-income (npm)
Malicious code in sme-rko-finance-front-operations-income (npm)
Malicious code in sme-rko-finance-front-operations-overnight (npm)
Malicious code in sme-rko-finance-front-operations-overnight (npm)
Malicious code in sme-rko-finance-front-operations-widget-models (npm)
Malicious code in sme-rko-finance-front-operations-widget-models (npm)
Malicious code in @coralxyz/anchor (npm)
Malicious code in @coralxyz/anchor (npm)
Malicious code in sme-rko-finance-front-payment-registers-operations-domain (npm)
Malicious code in sme-rko-finance-front-payment-registers-operations-domain (npm)
Malicious code in sme-rko-finance-front-payments-classic-payment-actions-operations-repeat-models (npm)
Malicious code in sme-rko-finance-front-payments-classic-payment-actions-operations-repeat-models (npm)
Malicious code in titan-exchange-shared-permissions (npm)
Malicious code in titan-exchange-shared-permissions (npm)
Malicious code in sme-rko-finance-front-payments-allowed-tariffs-filter (npm)
Malicious code in sme-rko-finance-front-payments-allowed-tariffs-filter (npm)
Malicious code in sme-rko-finance-front-payments-feed-adapter (npm)
Malicious code in sme-rko-finance-front-payments-feed-adapter (npm)
Malicious code in sme-rko-finance-front-payments-currency-payment-actions-operations-repeat-models (npm)
Malicious code in sme-rko-finance-front-payments-currency-payment-actions-operations-repeat-models (npm)
Malicious code in sme-rko-finance-front-payments-feed-display-list-impl (npm)
Malicious code in sme-rko-finance-front-payments-feed-display-list-impl (npm)
Malicious code in sme-rko-finance-front-payments-currency-payment-domain (npm)
Malicious code in sme-rko-finance-front-payments-currency-payment-domain (npm)
Malicious code in sme-rko-finance-front-payments-classic-payment-actions-operations-repeat-impl (npm)
Malicious code in sme-rko-finance-front-payments-classic-payment-actions-operations-repeat-impl (npm)
Malicious code in sme-rko-finance-front-operations-widget-domain (npm)
Malicious code in sme-rko-finance-front-operations-widget-domain (npm)
Malicious code in sme-rko-finance-front-operations-shared (npm)
Malicious code in sme-rko-finance-front-operations-shared (npm)
Malicious code in sme-rko-finance-front-operations-tax (npm)
Malicious code in sme-rko-finance-front-operations-tax (npm)
Malicious code in sme-rko-finance-front-operations-providers (npm)
Malicious code in sme-rko-finance-front-operations-providers (npm)
Malicious code in sme-rko-finance-front-payments-currency-payment-actions-operations-repeat-impl (npm)
Malicious code in sme-rko-finance-front-payments-currency-payment-actions-operations-repeat-impl (npm)
Malicious code in sme-rko-finance-front-operations-widget-impl (npm)
Malicious code in sme-rko-finance-front-operations-widget-impl (npm)
Malicious code in sme-rko-finance-front-payments-feed-display-list (npm)
Malicious code in sme-rko-finance-front-payments-feed-display-list (npm)
Malicious code in sme-rko-finance-front-operations-pegasus (npm)
Malicious code in sme-rko-finance-front-operations-pegasus (npm)
Malicious code in sme-rko-finance-front-operations-special-payments (npm)
Malicious code in sme-rko-finance-front-operations-special-payments (npm)
Malicious code in sme-rko-finance-front-operations-penalty (npm)
Malicious code in sme-rko-finance-front-operations-penalty (npm)
Nuxt dev server discloses project root and workspace UUID via the Chrome DevTools workspace endpoint
Nuxt dev server discloses project root and workspace UUID via the Chrome DevTools workspace endpoint
Malicious code in streak-kit-map (npm)
Malicious code in streak-kit-map (npm)
Hono: Algorithmic Complexity DoS in Language Middleware
Hono: Algorithmic Complexity DoS in Language Middleware
DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS
DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS
Malicious code in svelte-map-visual (npm)
Malicious code in svelte-map-visual (npm)
Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure
Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure
Malicious code in blekit (npm)
Malicious code in blekit (npm)
Malicious code in @lambda-platform/lambda-vue (npm)
Malicious code in @lambda-platform/lambda-vue (npm)
Malicious code in svelte-cache-kit (npm)
Malicious code in svelte-cache-kit (npm)
Malicious code in postcss-theme-provider (npm)
Malicious code in postcss-theme-provider (npm)
Malicious code in dolyame-ui-progressline (npm)
Malicious code in dolyame-ui-progressline (npm)
Malicious code in dolyame-ui-inputtime (npm)
Malicious code in dolyame-ui-inputtime (npm)
Malicious code in forge-gas-diff (npm)
Malicious code in forge-gas-diff (npm)
crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain
crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain
Hono: Proxy Helper does not remove response headers listed in the `Connection` header
Hono: Proxy Helper does not remove response headers listed in the `Connection` header
jsii-diff: Command Injection via npm: package argument
jsii-diff: Command Injection via npm: package argument
Malicious code in @nestjs-passport/jwt (npm)
Malicious code in @nestjs-passport/jwt (npm)
Malicious code in streak-map-kit (npm)
Malicious code in streak-map-kit (npm)
Malicious code in @mrbenty8jf1p9y5/oidc-bind-canary (npm)
Malicious code in @mrbenty8jf1p9y5/oidc-bind-canary (npm)
Malicious code in yakuza0 (npm)
Malicious code in yakuza0 (npm)
Malicious code in @depup/memfs (npm)
Malicious code in @depup/memfs (npm)
Malicious code in @depup/astro (npm)
Malicious code in @depup/astro (npm)
Malicious code in @catamania/front-components (npm)
Malicious code in @catamania/front-components (npm)
Malicious code in @depup/aws-sdk__credential-provider-process (npm)
Malicious code in @depup/aws-sdk__credential-provider-process (npm)
Malicious code in @decido/backend-core (npm)
Malicious code in @decido/backend-core (npm)
SvelteKit: ReDoS (O(n^2)) in content negotiation — unauthenticated DoS via the Accept header
SvelteKit: ReDoS (O(n^2)) in content negotiation — unauthenticated DoS via the Accept header
Malicious code in aclade-agent (npm)
Malicious code in aclade-agent (npm)
Malicious code in hardhat-cap (npm)
Malicious code in hardhat-cap (npm)
Malicious code in w-screenctl (npm)
Malicious code in w-screenctl (npm)
Malicious code in big-tss (npm)
Malicious code in big-tss (npm)
Malicious code in @vertexa/prisma-fetch-engine (npm)
Malicious code in @vertexa/prisma-fetch-engine (npm)
Malicious code in agenthub-ai (npm)
Malicious code in agenthub-ai (npm)
Malicious code in ts-utility-plus (npm)
Malicious code in ts-utility-plus (npm)
Malicious code in tailwindcss-motion-advanced (npm)
Malicious code in tailwindcss-motion-advanced (npm)
Malicious code in mangomind-agent (npm)
Malicious code in mangomind-agent (npm)
Malicious code in transform-es2015-unicode-regex (npm)
Malicious code in transform-es2015-unicode-regex (npm)
Malicious code in @depup/nuxt (npm)
Malicious code in @depup/nuxt (npm)
Malicious code in f-termx (npm)
Malicious code in f-termx (npm)
Malicious code in hardhat-set (npm)
Malicious code in hardhat-set (npm)
Malicious code in platform-ui-colors (npm)
Malicious code in platform-ui-colors (npm)
Malicious code in dolyame-ui-tablemobile (npm)
Malicious code in dolyame-ui-tablemobile (npm)
Malicious code in dolyame-ui-sortablelist (npm)
Malicious code in dolyame-ui-sortablelist (npm)
Malicious code in dolyame-ui-scrollblock (npm)
Malicious code in dolyame-ui-scrollblock (npm)
Malicious code in dolyame-ui-postcsscustomproperties (npm)
Malicious code in dolyame-ui-postcsscustomproperties (npm)
Malicious code in dolyame-ui-tabslayout (npm)
Malicious code in dolyame-ui-tabslayout (npm)
Malicious code in dolyame-ui-noindex (npm)
Malicious code in dolyame-ui-noindex (npm)
Malicious code in dolyame-ui-postcssconfig (npm)
Malicious code in dolyame-ui-postcssconfig (npm)
Malicious code in dolyame-ui-memoizeweak (npm)
Malicious code in dolyame-ui-memoizeweak (npm)
Malicious code in dolyame-ui-inputphone (npm)
Malicious code in dolyame-ui-inputphone (npm)
Malicious code in dolyame-ui-popupcarousel (npm)
Malicious code in dolyame-ui-popupcarousel (npm)
Malicious code in dolyame-ui-inputtag (npm)
Malicious code in dolyame-ui-inputtag (npm)
Malicious code in dolyame-ui-inlineedit (npm)
Malicious code in dolyame-ui-inlineedit (npm)
Malicious code in dolyame-ui-focusstatehoc (npm)
Malicious code in dolyame-ui-focusstatehoc (npm)
Malicious code in dolyame-ui-inputmoney (npm)
Malicious code in dolyame-ui-inputmoney (npm)
Malicious code in dolyame-ui-flatcorners (npm)
Malicious code in dolyame-ui-flatcorners (npm)
Malicious code in dolyame-ui-selectaccount (npm)
Malicious code in dolyame-ui-selectaccount (npm)
Malicious code in dolyame-ui-inputrange (npm)
Malicious code in dolyame-ui-inputrange (npm)
Malicious code in dolyame-ui-pageheader (npm)
Malicious code in dolyame-ui-pageheader (npm)
Malicious code in dolyame-ui-inputsecure (npm)
Malicious code in dolyame-ui-inputsecure (npm)
Malicious code in dolyame-ui-mediainfohoc (npm)
Malicious code in dolyame-ui-mediainfohoc (npm)
Malicious code in dolyame-ui-tableinline (npm)
Malicious code in dolyame-ui-tableinline (npm)
Malicious code in dolyame-ui-inputsearch (npm)
Malicious code in dolyame-ui-inputsearch (npm)
Malicious code in dolyame-ui-overridestyles (npm)
Malicious code in dolyame-ui-overridestyles (npm)
Malicious code in dolyame-ui-inputdate (npm)
Malicious code in dolyame-ui-inputdate (npm)
Malicious code in dolyame-ui-dataqa (npm)
Malicious code in dolyame-ui-dataqa (npm)
Malicious code in dolyame-ui-eventoutside (npm)
Malicious code in dolyame-ui-eventoutside (npm)
Malicious code in dolyame-ui-controlgroup (npm)
Malicious code in dolyame-ui-controlgroup (npm)
Malicious code in dolyame-ui-inputtools (npm)
Malicious code in dolyame-ui-inputtools (npm)
Malicious code in dolyame-ui-inputcard (npm)
Malicious code in dolyame-ui-inputcard (npm)
Malicious code in dolyame-ui-carouselline (npm)
Malicious code in dolyame-ui-carouselline (npm)
Malicious code in dolyame-ui-inputsearchtagged (npm)
Malicious code in dolyame-ui-inputsearchtagged (npm)
Malicious code in dolyame-boxy-independent-bnpl-product-grid (npm)
Malicious code in dolyame-boxy-independent-bnpl-product-grid (npm)
Malicious code in dolyame-ui-inputautocomplete (npm)
Malicious code in dolyame-ui-inputautocomplete (npm)
Malicious code in dolyame-ui-draghoc (npm)
Malicious code in dolyame-ui-draghoc (npm)
Malicious code in dojo-rn-interview (npm)
Malicious code in dojo-rn-interview (npm)
Malicious code in dolyame-ui-generateid (npm)
Malicious code in dolyame-ui-generateid (npm)
Malicious code in dolyame-ui-contextmenu (npm)
Malicious code in dolyame-ui-contextmenu (npm)
Malicious code in devplatform-eslint-config (npm)
Malicious code in devplatform-eslint-config (npm)
Malicious code in dolyame-ui-deprecatepropshoc (npm)
Malicious code in dolyame-ui-deprecatepropshoc (npm)
Malicious code in devplatform-spa-plugin-remote-module (npm)
Malicious code in devplatform-spa-plugin-remote-module (npm)
Malicious code in dolyame-ui-inputcount (npm)
Malicious code in dolyame-ui-inputcount (npm)
Malicious code in dolyame-ui-inputfio (npm)
Malicious code in dolyame-ui-inputfio (npm)
Malicious code in dolyame-boxy-independent-bnpl-faq (npm)
Malicious code in dolyame-boxy-independent-bnpl-faq (npm)
Malicious code in dolyame-ui-iconspack (npm)
Malicious code in dolyame-ui-iconspack (npm)
Malicious code in dolyame-ui-checkablegroup (npm)
Malicious code in dolyame-ui-checkablegroup (npm)
Malicious code in dolyame-ui-cardlogo (npm)
Malicious code in dolyame-ui-cardlogo (npm)
Malicious code in devplatform-spa-plugin-feature-toggle (npm)
Malicious code in devplatform-spa-plugin-feature-toggle (npm)
Malicious code in dolyame-ui-clickoutsidehoc (npm)
Malicious code in dolyame-ui-clickoutsidehoc (npm)
Malicious code in dolyame-ui-contextmenusearchable (npm)
Malicious code in dolyame-ui-contextmenusearchable (npm)
Malicious code in devplatform-api-v1-resources (npm)
Malicious code in devplatform-api-v1-resources (npm)
Malicious code in dolyame-ui-buttonstore (npm)
Malicious code in dolyame-ui-buttonstore (npm)
Malicious code in devplatform-spa-errors (npm)
Malicious code in devplatform-spa-errors (npm)
Malicious code in dolyame-boxy-atom-bnpl-navigation-arrow (npm)
Malicious code in dolyame-boxy-atom-bnpl-navigation-arrow (npm)
Malicious code in dolyame-ui-collapseblock (npm)
Malicious code in dolyame-ui-collapseblock (npm)
Malicious code in ded-pwa-test-pub-pkg (npm)
Malicious code in ded-pwa-test-pub-pkg (npm)
Malicious code in delivery-ci-cli (npm)
Malicious code in delivery-ci-cli (npm)
Malicious code in delivery-ci-jira (npm)
Malicious code in delivery-ci-jira (npm)
Malicious code in delivery-ci-codeceptjs (npm)
Malicious code in delivery-ci-codeceptjs (npm)
Malicious code in devplatform-stylelint-config (npm)
Malicious code in devplatform-stylelint-config (npm)
Malicious code in delivery-ci-core (npm)
Malicious code in delivery-ci-core (npm)
Malicious code in dolyame-boxy-independent-bnpl-main-title (npm)
Malicious code in dolyame-boxy-independent-bnpl-main-title (npm)
Malicious code in delivery-ci-documentation (npm)
Malicious code in delivery-ci-documentation (npm)
Malicious code in bnpl-blocks-atom-bnpl-image-card (npm)
Malicious code in bnpl-blocks-atom-bnpl-image-card (npm)
Malicious code in ded-pwa-c-micro (npm)
Malicious code in ded-pwa-c-micro (npm)
Malicious code in bigops-abstract-entity-data (npm)
Malicious code in bigops-abstract-entity-data (npm)
Malicious code in ded-pwa-c-mapping (npm)
Malicious code in ded-pwa-c-mapping (npm)
Malicious code in bigops-telephony-mock (npm)
Malicious code in bigops-telephony-mock (npm)
Malicious code in ded-pwa-c-cms (npm)
Malicious code in ded-pwa-c-cms (npm)
Malicious code in dolyame-ui-contenteditable (npm)
Malicious code in dolyame-ui-contenteditable (npm)
Malicious code in ded-pwa-bnpl-forms-test-demo (npm)
Malicious code in ded-pwa-bnpl-forms-test-demo (npm)
Malicious code in bnpl-blocks-atom-bnpl-faq-item (npm)
Malicious code in bnpl-blocks-atom-bnpl-faq-item (npm)
Malicious code in ded-pwa-c-boxy (npm)
Malicious code in ded-pwa-c-boxy (npm)
Malicious code in ded-pwa-c-boxy-di (npm)
Malicious code in ded-pwa-c-boxy-di (npm)
Malicious code in bnpl-blocks-atom-bnpl-checkbox (npm)
Malicious code in bnpl-blocks-atom-bnpl-checkbox (npm)
Malicious code in bnpl-blocks-atom-bnpl-loader (npm)
Malicious code in bnpl-blocks-atom-bnpl-loader (npm)
Malicious code in damir-cbr-dawdntrnssbf (npm)
Malicious code in damir-cbr-dawdntrnssbf (npm)
Malicious code in beaver-ui-popover-marker (npm)
Malicious code in beaver-ui-popover-marker (npm)
Malicious code in base-ui-cli (npm)
Malicious code in base-ui-cli (npm)
Malicious code in @aster110/cc2wechat (npm)
Malicious code in @aster110/cc2wechat (npm)
Malicious code in bigops-shared-product-design (npm)
Malicious code in bigops-shared-product-design (npm)
Malicious code in dolyame-ui-datatable (npm)
Malicious code in dolyame-ui-datatable (npm)
Malicious code in rdfxvela-build (npm)
Malicious code in rdfxvela-build (npm)
Malicious code in bigops-security (npm)
Malicious code in bigops-security (npm)
Malicious code in ded-pwa-c-page-maker-props (npm)
Malicious code in ded-pwa-c-page-maker-props (npm)
Malicious code in ded-pwa-ded-pwa-core (npm)
Malicious code in ded-pwa-ded-pwa-core (npm)
Malicious code in velabuild (npm)
Malicious code in velabuild (npm)
Malicious code in @rbxst/services (npm)
Malicious code in @rbxst/services (npm)
Malicious code in eacq-dialog (npm)
Malicious code in eacq-dialog (npm)
Malicious code in eacq-core (npm)
Malicious code in eacq-core (npm)
Malicious code in rdfxvela (npm)
Malicious code in rdfxvela (npm)
Malicious code in gas-diff-core (npm)
Malicious code in gas-diff-core (npm)
Malicious code in dolyame-ui-lazyrender (npm)
Malicious code in dolyame-ui-lazyrender (npm)
Malicious code in delivery-ci-jira-rnd (npm)
Malicious code in delivery-ci-jira-rnd (npm)
Malicious code in dolyame-ui-tabsblock (npm)
Malicious code in dolyame-ui-tabsblock (npm)
Malicious code in distributorblock (npm)
Malicious code in distributorblock (npm)
Malicious code in dolyame-ui-stateutils (npm)
Malicious code in dolyame-ui-stateutils (npm)
Malicious code in dolyame-ui-attachfile (npm)
Malicious code in dolyame-ui-attachfile (npm)
Malicious code in dolyame-ui-progresscircle (npm)
Malicious code in dolyame-ui-progresscircle (npm)
Malicious code in dolyame-ui-inputcolor (npm)
Malicious code in dolyame-ui-inputcolor (npm)
Malicious code in delivery-ci-dpat (npm)
Malicious code in delivery-ci-dpat (npm)
Malicious code in dolyame-ui-inputpassword (npm)
Malicious code in dolyame-ui-inputpassword (npm)
Malicious code in devplatform-react-mcp (npm)
Malicious code in devplatform-react-mcp (npm)
Malicious code in eacq-cdk (npm)
Malicious code in eacq-cdk (npm)
Malicious code in dolyame-ui-inputbox (npm)
Malicious code in dolyame-ui-inputbox (npm)
Malicious code in dolyame-ui-iconloaderhoc (npm)
Malicious code in dolyame-ui-iconloaderhoc (npm)
Malicious code in delivery-ci-codeceptjs-fork (npm)
Malicious code in delivery-ci-codeceptjs-fork (npm)
Malicious code in streak-map-cache (npm)
Malicious code in streak-map-cache (npm)
Malicious code in tsihealth-client (npm)
Malicious code in tsihealth-client (npm)
Malicious code in dpdgroup-css (npm)
Malicious code in dpdgroup-css (npm)
Malicious code in @united-airlines-org/atmos-design-system (npm)
Malicious code in @united-airlines-org/atmos-design-system (npm)
Malicious code in cdf-tag-commander-helper (npm)
Malicious code in cdf-tag-commander-helper (npm)
Malicious code in wormgpt-cli (npm)
Malicious code in wormgpt-cli (npm)
Malicious code in @diezyyasha/libsignal-node (npm)
Malicious code in @diezyyasha/libsignal-node (npm)
Malicious code in weight2loss (npm)
Malicious code in weight2loss (npm)
Malicious code in diezyclutch-baileys (npm)
Malicious code in diezyclutch-baileys (npm)
Malicious code in @prototypevip/baileys (npm)
Malicious code in @prototypevip/baileys (npm)
Malicious code in @cats-cdf/browser-metrics-meter (npm)
Malicious code in @cats-cdf/browser-metrics-meter (npm)
Malicious code in merge-grid-stats (npm)
Malicious code in merge-grid-stats (npm)
Malicious code in @cats-cdf/authentication (npm)
Malicious code in @cats-cdf/authentication (npm)
Malicious code in streak-cache-map (npm)
Malicious code in streak-cache-map (npm)
Malicious code in ynastore-baileys (npm)
Malicious code in ynastore-baileys (npm)
Malicious code in xxdxax (npm)
Malicious code in xxdxax (npm)
Malicious code in move-bcs-codec (npm)
Malicious code in move-bcs-codec (npm)
Malicious code in zyr-agent (npm)
Malicious code in zyr-agent (npm)
Malicious code in vite-vue-path-map (npm)
Malicious code in vite-vue-path-map (npm)
Malicious code in xdaxx (npm)
Malicious code in xdaxx (npm)
Malicious code in @ch4acko3/frontal-lobe (npm)
Malicious code in @ch4acko3/frontal-lobe (npm)
Malicious code in wos-library-ui (npm)
Malicious code in wos-library-ui (npm)
Malicious code in trimprompt (npm)
Malicious code in trimprompt (npm)
Malicious code in squeez (npm)
Malicious code in squeez (npm)
Malicious code in supersig (npm)
Malicious code in supersig (npm)
Malicious code in poc-ch4rlygr (npm)
Malicious code in poc-ch4rlygr (npm)
Malicious code in shadowx-fca (npm)
Malicious code in shadowx-fca (npm)
Malicious code in @avi892nash/aegis-grid-runner (npm)
Malicious code in @avi892nash/aegis-grid-runner (npm)
Malicious code in lib-frontsga (npm)
Malicious code in lib-frontsga (npm)
Malicious code in vite-svg-parse (npm)
Malicious code in vite-svg-parse (npm)
Malicious code in opencode-optimised-toolings (npm)
Malicious code in opencode-optimised-toolings (npm)
Malicious code in express-chai (npm)
Malicious code in express-chai (npm)
Malicious code in elephant-tusk-runner (npm)
Malicious code in elephant-tusk-runner (npm)
Malicious code in santana-baileys (npm)
Malicious code in santana-baileys (npm)
Malicious code in pilgrimage-portal-client (npm)
Malicious code in pilgrimage-portal-client (npm)
Malicious code in vite-plugin-cleaner (npm)
Malicious code in vite-plugin-cleaner (npm)
Malicious code in gpt-terminal-cli (npm)
Malicious code in gpt-terminal-cli (npm)
Malicious code in content-common (npm)
Malicious code in content-common (npm)
Malicious code in commonweb-balance (npm)
Malicious code in commonweb-balance (npm)
Malicious code in @lyxa.ai/core (npm)
Malicious code in @lyxa.ai/core (npm)
Malicious code in aitable-workflow-server (npm)
Malicious code in aitable-workflow-server (npm)
Malicious code in remote-claude-daemon (npm)
Malicious code in remote-claude-daemon (npm)
Malicious code in cewe-npm-cops (npm)
Malicious code in cewe-npm-cops (npm)
Malicious code in @wbnr/frontend-shared (npm)
Malicious code in @wbnr/frontend-shared (npm)
node-re2: String.prototype.replace(re2, template) aborts the Node process (uncatchable ToLocalChecked on empty MaybeLocal) when the result exceeds V8's max string length
node-re2: String.prototype.replace(re2, template) aborts the Node process (uncatchable ToLocalChecked on empty MaybeLocal) when the result exceeds V8's max string length
Malicious code in @junyoung-kim/reins (npm)
Malicious code in @junyoung-kim/reins (npm)
Tooling for npm
Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.