npm incidents
Recent npm vulnerabilities and malicious packages from OSV and CISA KEV, enriched with EPSS exploit probability.
Malicious code in sextant-cli-darwin-arm64 (npm)
Malicious code in sextant-cli-darwin-arm64 (npm)
Malicious code in streak-math-metrics (npm)
Malicious code in streak-math-metrics (npm)
Malicious code in streak-metricazbd (npm)
Malicious code in streak-metricazbd (npm)
Malicious code in streak-test-mathcore (npm)
Malicious code in streak-test-mathcore (npm)
Malicious code in streak-metricsazb (npm)
Malicious code in streak-metricsazb (npm)
Malicious code in @zzzgenesis00/spl-token-utils (npm)
Malicious code in @zzzgenesis00/spl-token-utils (npm)
Malicious code in platform-ui-codemods (npm)
Malicious code in platform-ui-codemods (npm)
Malicious code in sextant-cli-darwin-amd64 (npm)
Malicious code in sextant-cli-darwin-amd64 (npm)
Malicious code in @zzzgenesis00/bip39-mnemonic (npm)
Malicious code in @zzzgenesis00/bip39-mnemonic (npm)
Malicious code in @zzzgenesis00/ethers-wallet (npm)
Malicious code in @zzzgenesis00/ethers-wallet (npm)
Malicious code in aedes_clusters (npm)
Malicious code in aedes_clusters (npm)
Malicious code in beaver-ui-form-modal (npm)
Malicious code in beaver-ui-form-modal (npm)
Malicious code in add-two-numbers-x7q9m (npm)
Malicious code in add-two-numbers-x7q9m (npm)
Malicious code in bigops-auth-utils (npm)
Malicious code in bigops-auth-utils (npm)
Malicious code in bigops-chat-tmsg (npm)
Malicious code in bigops-chat-tmsg (npm)
Malicious code in bigops-customer (npm)
Malicious code in bigops-customer (npm)
Malicious code in bigops-create-manifest (npm)
Malicious code in bigops-create-manifest (npm)
Malicious code in data-format-helper (npm)
Malicious code in data-format-helper (npm)
Malicious code in forge-extended (npm)
Malicious code in forge-extended (npm)
Malicious code in statist-browser-typed-client-test.jumpwork.circuitbreaker (npm)
Malicious code in statist-browser-typed-client-test.jumpwork.circuitbreaker (npm)
Malicious code in platform-ui-island (npm)
Malicious code in platform-ui-island (npm)
Malicious code in specials-mvno-client (npm)
Malicious code in specials-mvno-client (npm)
Malicious code in streak-day-utils (npm)
Malicious code in streak-day-utils (npm)
Malicious code in sextant-cli-linux-arm64 (npm)
Malicious code in sextant-cli-linux-arm64 (npm)
Malicious code in tinkoff-component-infopanel (npm)
Malicious code in tinkoff-component-infopanel (npm)
Malicious code in tinkoff-boxy-desktop-features-banner (npm)
Malicious code in tinkoff-boxy-desktop-features-banner (npm)
Malicious code in statist-browser-typed-client-hra.workplacer.events (npm)
Malicious code in statist-browser-typed-client-hra.workplacer.events (npm)
Malicious code in tramvai-tinkoff-module-legacy-popup (npm)
Malicious code in tramvai-tinkoff-module-legacy-popup (npm)
Malicious code in tui-react-mobile-styles (npm)
Malicious code in tui-react-mobile-styles (npm)
Malicious code in uibabai (npm)
Malicious code in uibabai (npm)
Malicious code in tinkoff-ui-action (npm)
Malicious code in tinkoff-ui-action (npm)
Malicious code in tinkoff-statist-browser-typed-client-sme.reporting.reporting (npm)
Malicious code in tinkoff-statist-browser-typed-client-sme.reporting.reporting (npm)
Malicious code in boardwalk-js-tests (npm)
Malicious code in boardwalk-js-tests (npm)
Malicious code in beaver-ui-card-large (npm)
Malicious code in beaver-ui-card-large (npm)
Malicious code in hwi-lib (npm)
Malicious code in hwi-lib (npm)
Malicious code in checkout-create-pos-order-am (npm)
Malicious code in checkout-create-pos-order-am (npm)
Malicious code in greatcall-customers-commandapi (npm)
Malicious code in greatcall-customers-commandapi (npm)
Malicious code in @zzzgenesis00/docker-api-client (npm)
Malicious code in @zzzgenesis00/docker-api-client (npm)
Malicious code in trezor-lib (npm)
Malicious code in trezor-lib (npm)
Malicious code in ledger-lib (npm)
Malicious code in ledger-lib (npm)
Malicious code in hubert-appointment-v2-task-create-am (npm)
Malicious code in hubert-appointment-v2-task-create-am (npm)
Malicious code in nxify-unic (npm)
Malicious code in nxify-unic (npm)
Malicious code in statist-browser-typed-client-nfs.grocery.mobile.events (npm)
Malicious code in statist-browser-typed-client-nfs.grocery.mobile.events (npm)
Malicious code in sotqa-test (npm)
Malicious code in sotqa-test (npm)
Malicious code in specials-obid-webpack (npm)
Malicious code in specials-obid-webpack (npm)
Malicious code in tinkoff-boxy-mobile-vivid-heading (npm)
Malicious code in tinkoff-boxy-mobile-vivid-heading (npm)
Malicious code in tinkoff-cache-path (npm)
Malicious code in tinkoff-cache-path (npm)
Malicious code in sso-tramvai-module-context-auth (npm)
Malicious code in sso-tramvai-module-context-auth (npm)
Malicious code in @zzzgenesis00/mnemonic-to-key (npm)
Malicious code in @zzzgenesis00/mnemonic-to-key (npm)
Malicious code in bcore-bravo-eslint-config (npm)
Malicious code in bcore-bravo-eslint-config (npm)
Malicious code in shopping-shared-atom-mobile-cart-counter (npm)
Malicious code in shopping-shared-atom-mobile-cart-counter (npm)
Malicious code in sextant-cli-linux-amd64 (npm)
Malicious code in sextant-cli-linux-amd64 (npm)
Malicious code in @zzzgenesis00/playwrite (npm)
Malicious code in @zzzgenesis00/playwrite (npm)
Malicious code in tinkoff-statist-browser-typed-client-sme.compliance.web.events (npm)
Malicious code in tinkoff-statist-browser-typed-client-sme.compliance.web.events (npm)
Malicious code in volna-boxy-di-test (npm)
Malicious code in volna-boxy-di-test (npm)
Malicious code in streak-map-metrics (npm)
Malicious code in streak-map-metrics (npm)
Malicious code in ckcc-protocol (npm)
Malicious code in ckcc-protocol (npm)
Malicious code in bigops-eslint (npm)
Malicious code in bigops-eslint (npm)
Malicious code in sn-listbox (npm)
Malicious code in sn-listbox (npm)
Ghost: Private IP filtering bypass to make server-side requests to internal services
Ghost: Private IP filtering bypass to make server-side requests to internal services
Ghost: Cross-Site Scripting in Universal Import
Ghost: Cross-Site Scripting in Universal Import
Ghost: Server-side request forgery via DNS rebinding in external request handling
Ghost: Server-side request forgery via DNS rebinding in external request handling
Ghost: Mobiledoc image-size fetch SSRF
Ghost: Mobiledoc image-size fetch SSRF
Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service
Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service
Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys
Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys
Flowise: Incomplete Credential Redaction Exposes Secrets via API
Flowise: Incomplete Credential Redaction Exposes Secrets via API
Ghost: Archived Offers can be Redeemed
Ghost: Archived Offers can be Redeemed
Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses
Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses
Flowise: Remote Code Execution Vulnerability in CSVAgent
Flowise: Remote Code Execution Vulnerability in CSVAgent
Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation
Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store
Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store
Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)
Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)
Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE
Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE
Flowise: Cross-Workspace OAuth2 Credential Metadata Leak
Flowise: Cross-Workspace OAuth2 Credential Metadata Leak
Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history
Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history
Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation
Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation
Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API
Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API
Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override
Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override
Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
Malicious code in exnesss (npm)
Malicious code in exnesss (npm)
Flowise: IDOR vulnerability exists at the GET /api/v1/organization/customer-default-source endpoint
Flowise: IDOR vulnerability exists at the GET /api/v1/organization/customer-default-source endpoint
Flowise: Missing Authorization on Execution Update Endpoint
Flowise: Missing Authorization on Execution Update Endpoint
Flowise Sandbox Escape to RCE
Flowise Sandbox Escape to RCE
Malicious code in @zzzgenesis00/bip39-generator (npm)
Malicious code in @zzzgenesis00/bip39-generator (npm)
Flowise: Unauthenticated Credential Abuse via Text-to-Speech Endpoint Allows Unauthorized Use of Private Chatflow TTS Credentials
Flowise: Unauthenticated Credential Abuse via Text-to-Speech Endpoint Allows Unauthorized Use of Private Chatflow TTS Credentials
Flowise RCE via TypeORM DataSource
Flowise RCE via TypeORM DataSource
Flowise RCE via SQLite Record Manager Node
Flowise RCE via SQLite Record Manager Node
Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization
Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization
Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration
Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration
Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified
Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified
Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type
Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type
Malicious code in verdaccio-okta-oauth (npm)
Malicious code in verdaccio-okta-oauth (npm)
Malicious code in cacheable-request (npm)
Malicious code in cacheable-request (npm)
Malicious code in babel-plugin-linaria-css-to-undefined (npm)
Malicious code in babel-plugin-linaria-css-to-undefined (npm)
Malicious code in cors-version (npm)
Malicious code in cors-version (npm)
Malicious code in @zzzgenesis00/web3-provider-engine (npm)
Malicious code in @zzzgenesis00/web3-provider-engine (npm)
Malicious code in hubert-application-get-document-preview-am (npm)
Malicious code in hubert-application-get-document-preview-am (npm)
Malicious code in webdev-conf (npm)
Malicious code in webdev-conf (npm)
Malicious code in workbench-browser-server (npm)
Malicious code in workbench-browser-server (npm)
Malicious code in vitest-preview-pro (npm)
Malicious code in vitest-preview-pro (npm)
Malicious code in umadev (npm)
Malicious code in umadev (npm)
Malicious code in tailwind-anime (npm)
Malicious code in tailwind-anime (npm)
Malicious code in verdaccio-tarball-local-storage (npm)
Malicious code in verdaccio-tarball-local-storage (npm)
Malicious code in qlik-object-conversion (npm)
Malicious code in qlik-object-conversion (npm)
Malicious code in server-hemera-mongo (npm)
Malicious code in server-hemera-mongo (npm)
Malicious code in picasso.js (npm)
Malicious code in picasso.js (npm)
Malicious code in http-metrics-middleware (npm)
Malicious code in http-metrics-middleware (npm)
Malicious code in hamus.js (npm)
Malicious code in hamus.js (npm)
Malicious code in keyv (npm)
Malicious code in keyv (npm)
Malicious code in folder-lint (npm)
Malicious code in folder-lint (npm)
Malicious code in flat-cache (npm)
Malicious code in flat-cache (npm)
Malicious code in file-entry-cache (npm)
Malicious code in file-entry-cache (npm)
Malicious code in example-js-project (npm)
Malicious code in example-js-project (npm)
Malicious code in eslint-plugin-folder-schema (npm)
Malicious code in eslint-plugin-folder-schema (npm)
Malicious code in cacheable (npm)
Malicious code in cacheable (npm)
Malicious code in approval-guardian (npm)
Malicious code in approval-guardian (npm)
Malicious code in ecto (npm)
Malicious code in ecto (npm)
Malicious code in emulative (npm)
Malicious code in emulative (npm)
Malicious code in conv-context-next (npm)
Malicious code in conv-context-next (npm)
Malicious code in cache-manager (npm)
Malicious code in cache-manager (npm)
Malicious code in simple-date-formatter-util-7 (npm)
Malicious code in simple-date-formatter-util-7 (npm)
Malicious code in @umacloud/cli-win32-x64 (npm)
Malicious code in @umacloud/cli-win32-x64 (npm)
Malicious code in @workbench-stack/core (npm)
Malicious code in @workbench-stack/core (npm)
Malicious code in @umacloud/knowledge (npm)
Malicious code in @umacloud/knowledge (npm)
Malicious code in editable-contracts (npm)
Malicious code in editable-contracts (npm)
Malicious code in @umacloud/cli-linux-musl-arm64 (npm)
Malicious code in @umacloud/cli-linux-musl-arm64 (npm)
Malicious code in @umacloud/cli-linux-arm64 (npm)
Malicious code in @umacloud/cli-linux-arm64 (npm)
Malicious code in @umacloud/cli-linux-musl-x64 (npm)
Malicious code in @umacloud/cli-linux-musl-x64 (npm)
Malicious code in @umacloud/cli-linux-x64 (npm)
Malicious code in @umacloud/cli-linux-x64 (npm)
Malicious code in @umacloud/cli-darwin-arm64 (npm)
Malicious code in @umacloud/cli-darwin-arm64 (npm)
Malicious code in @tuluax/errb (npm)
Malicious code in @tuluax/errb (npm)
Malicious code in @umacloud/cli-darwin-x64 (npm)
Malicious code in @umacloud/cli-darwin-x64 (npm)
Malicious code in @thiennq/docs-viewer (npm)
Malicious code in @thiennq/docs-viewer (npm)
Malicious code in @keyv/sqlite (npm)
Malicious code in @keyv/sqlite (npm)
Malicious code in @qlik/sprout-gesture (npm)
Malicious code in @qlik/sprout-gesture (npm)
Malicious code in @qlik/sprout-icons (npm)
Malicious code in @qlik/sprout-icons (npm)
Malicious code in @qlik/sprout-react (npm)
Malicious code in @qlik/sprout-react (npm)
Malicious code in @qlik/sprout-design-docs (npm)
Malicious code in @qlik/sprout-design-docs (npm)
Malicious code in @qlik/sdk (npm)
Malicious code in @qlik/sdk (npm)
Malicious code in @qlik/sprout-react-table (npm)
Malicious code in @qlik/sprout-react-table (npm)
Malicious code in @qlik/tsconfig (npm)
Malicious code in @qlik/tsconfig (npm)
Malicious code in @qlik/runtime-module-loader (npm)
Malicious code in @qlik/runtime-module-loader (npm)
Malicious code in @qlik/oxlint-config (npm)
Malicious code in @qlik/oxlint-config (npm)
Malicious code in @qlik/react-native-simple-grid (npm)
Malicious code in @qlik/react-native-simple-grid (npm)
Malicious code in @qlik/prettier-config (npm)
Malicious code in @qlik/prettier-config (npm)
Malicious code in @qlik/oxfmt-config (npm)
Malicious code in @qlik/oxfmt-config (npm)
Malicious code in @qlik/nebula-table-utils (npm)
Malicious code in @qlik/nebula-table-utils (npm)
Malicious code in @qlik/eslint-config (npm)
Malicious code in @qlik/eslint-config (npm)
Malicious code in @qlik/eslint-config-react (npm)
Malicious code in @qlik/eslint-config-react (npm)
Malicious code in @keyv/valkey (npm)
Malicious code in @keyv/valkey (npm)
Malicious code in @qlik/eslint-config-svelte (npm)
Malicious code in @qlik/eslint-config-svelte (npm)
Malicious code in @qlik/eslint-config-base (npm)
Malicious code in @qlik/eslint-config-base (npm)
Malicious code in @qlik/design-tokens (npm)
Malicious code in @qlik/design-tokens (npm)
Malicious code in @qlik/embed-web-components (npm)
Malicious code in @qlik/embed-web-components (npm)
Malicious code in @qlik/embed-runtime (npm)
Malicious code in @qlik/embed-runtime (npm)
Malicious code in @qlik/carbon-core (npm)
Malicious code in @qlik/carbon-core (npm)
Malicious code in @qlik/embed-react (npm)
Malicious code in @qlik/embed-react (npm)
Malicious code in @qlik/carboncopy (npm)
Malicious code in @qlik/carboncopy (npm)
Malicious code in @qlik/dts-bundler (npm)
Malicious code in @qlik/dts-bundler (npm)
Malicious code in @qlik/browserslist-config (npm)
Malicious code in @qlik/browserslist-config (npm)
Malicious code in @qlik/api (npm)
Malicious code in @qlik/api (npm)
Malicious code in @keyv/test-suite (npm)
Malicious code in @keyv/test-suite (npm)
Malicious code in @picsart/ai-sdk (npm)
Malicious code in @picsart/ai-sdk (npm)
Malicious code in @picsart/gen-ai (npm)
Malicious code in @picsart/gen-ai (npm)
Malicious code in @or-sdk/web-search (npm)
Malicious code in @or-sdk/web-search (npm)
Malicious code in @or-sdk/transcripts (npm)
Malicious code in @or-sdk/transcripts (npm)
Malicious code in @or-sdk/views (npm)
Malicious code in @or-sdk/views (npm)
Malicious code in @or-sdk/view-templates (npm)
Malicious code in @or-sdk/view-templates (npm)
Malicious code in @or-sdk/users (npm)
Malicious code in @or-sdk/users (npm)
Malicious code in @or-sdk/tickets (npm)
Malicious code in @or-sdk/tickets (npm)
Malicious code in @or-sdk/tags (npm)
Malicious code in @or-sdk/tags (npm)
Malicious code in @qlik/embed-svelte (npm)
Malicious code in @qlik/embed-svelte (npm)
Malicious code in @or-sdk/source (npm)
Malicious code in @or-sdk/source (npm)
Malicious code in @keyv/postgres (npm)
Malicious code in @keyv/postgres (npm)
Malicious code in @or-sdk/sdk-api (npm)
Malicious code in @or-sdk/sdk-api (npm)
Malicious code in @or-sdk/tables (npm)
Malicious code in @or-sdk/tables (npm)
Malicious code in @or-sdk/queue-manager (npm)
Malicious code in @or-sdk/queue-manager (npm)
Malicious code in @or-sdk/settings (npm)
Malicious code in @or-sdk/settings (npm)
Malicious code in @or-sdk/sku-builder (npm)
Malicious code in @or-sdk/sku-builder (npm)
Malicious code in @or-sdk/source-api (npm)
Malicious code in @or-sdk/source-api (npm)
Malicious code in @or-sdk/providers (npm)
Malicious code in @or-sdk/providers (npm)
Malicious code in @or-sdk/store (npm)
Malicious code in @or-sdk/store (npm)
Malicious code in @or-sdk/step-templates (npm)
Malicious code in @or-sdk/step-templates (npm)
Malicious code in @or-sdk/qna (npm)
Malicious code in @or-sdk/qna (npm)
Malicious code in @or-sdk/pgsql (npm)
Malicious code in @or-sdk/pgsql (npm)
Malicious code in @or-sdk/permissions-lambda (npm)
Malicious code in @or-sdk/permissions-lambda (npm)
Malicious code in simple-date-formatter-util-6 (npm)
Malicious code in simple-date-formatter-util-6 (npm)
Malicious code in @or-sdk/permissions-cli (npm)
Malicious code in @or-sdk/permissions-cli (npm)
Malicious code in @or-sdk/permissions (npm)
Malicious code in @or-sdk/permissions (npm)
Malicious code in @or-sdk/lookup (npm)
Malicious code in @or-sdk/lookup (npm)
Malicious code in @or-sdk/password (npm)
Malicious code in @or-sdk/password (npm)
Malicious code in @or-sdk/payments (npm)
Malicious code in @or-sdk/payments (npm)
Malicious code in @or-sdk/mcp-tools (npm)
Malicious code in @or-sdk/mcp-tools (npm)
Malicious code in @or-sdk/notifications (npm)
Malicious code in @or-sdk/notifications (npm)
Malicious code in @or-sdk/library (npm)
Malicious code in @or-sdk/library (npm)
Malicious code in @or-sdk/library-source (npm)
Malicious code in @or-sdk/library-source (npm)
Malicious code in @or-sdk/library-types-v2 (npm)
Malicious code in @or-sdk/library-types-v2 (npm)
Malicious code in @or-sdk/knowledge-models (npm)
Malicious code in @or-sdk/knowledge-models (npm)
Malicious code in @or-sdk/library-types-v1 (npm)
Malicious code in @or-sdk/library-types-v1 (npm)
Malicious code in simple-date-formatter-util-10 (npm)
Malicious code in simple-date-formatter-util-10 (npm)
Malicious code in @or-sdk/library-categories (npm)
Malicious code in @or-sdk/library-categories (npm)
Malicious code in @or-sdk/keys (npm)
Malicious code in @or-sdk/keys (npm)
Malicious code in @or-sdk/invitations (npm)
Malicious code in @or-sdk/invitations (npm)
Malicious code in @or-sdk/key-value-storage (npm)
Malicious code in @or-sdk/key-value-storage (npm)
Malicious code in @or-sdk/idw-skill (npm)
Malicious code in @or-sdk/idw-skill (npm)
Malicious code in @or-sdk/idw (npm)
Malicious code in @or-sdk/idw (npm)
Malicious code in @or-sdk/hitl (npm)
Malicious code in @or-sdk/hitl (npm)
Malicious code in @or-sdk/markdowner (npm)
Malicious code in @or-sdk/markdowner (npm)
Malicious code in @or-sdk/identifiers (npm)
Malicious code in @or-sdk/identifiers (npm)
Malicious code in @or-sdk/graph (npm)
Malicious code in @or-sdk/graph (npm)
Malicious code in @or-sdk/idw-public (npm)
Malicious code in @or-sdk/idw-public (npm)
Malicious code in @or-sdk/discovery (npm)
Malicious code in @or-sdk/discovery (npm)
Malicious code in @or-sdk/flows (npm)
Malicious code in @or-sdk/flows (npm)
Malicious code in @or-sdk/druid (npm)
Malicious code in @or-sdk/druid (npm)
Malicious code in @or-sdk/files (npm)
Malicious code in @or-sdk/files (npm)
Malicious code in @or-sdk/event-manager (npm)
Malicious code in @or-sdk/event-manager (npm)
Malicious code in @or-sdk/flow-templates (npm)
Malicious code in @or-sdk/flow-templates (npm)
Malicious code in @or-sdk/data-hub (npm)
Malicious code in @or-sdk/data-hub (npm)
Malicious code in @or-sdk/content-request (npm)
Malicious code in @or-sdk/content-request (npm)
Malicious code in @or-sdk/deployments (npm)
Malicious code in @or-sdk/deployments (npm)
Malicious code in @or-sdk/deployer (npm)
Malicious code in @or-sdk/deployer (npm)
Malicious code in @or-sdk/data-hub-svc (npm)
Malicious code in @or-sdk/data-hub-svc (npm)
Malicious code in @or-sdk/cards (npm)
Malicious code in @or-sdk/cards (npm)
Malicious code in @or-sdk/chat (npm)
Malicious code in @or-sdk/chat (npm)
Malicious code in @or-sdk/contacts (npm)
Malicious code in @or-sdk/contacts (npm)
Malicious code in @or-sdk/ccp (npm)
Malicious code in @or-sdk/ccp (npm)
Malicious code in @or-sdk/files-sync-node (npm)
Malicious code in @or-sdk/files-sync-node (npm)
Malicious code in @or-sdk/card-templates (npm)
Malicious code in @or-sdk/card-templates (npm)
Malicious code in @or-sdk/base (npm)
Malicious code in @or-sdk/base (npm)
Malicious code in @or-sdk/billing (npm)
Malicious code in @or-sdk/billing (npm)
Malicious code in @or-sdk/authorizer (npm)
Malicious code in @or-sdk/authorizer (npm)
Malicious code in @or-sdk/api-tokens-lambda (npm)
Malicious code in @or-sdk/api-tokens-lambda (npm)
Malicious code in @or-sdk/bot-templates (npm)
Malicious code in @or-sdk/bot-templates (npm)
Malicious code in @or-sdk/apps (npm)
Malicious code in @or-sdk/apps (npm)
Malicious code in @or-sdk/billing-internal (npm)
Malicious code in @or-sdk/billing-internal (npm)
Malicious code in @or-sdk/auth (npm)
Malicious code in @or-sdk/auth (npm)
Malicious code in @or-sdk/api-tokens (npm)
Malicious code in @or-sdk/api-tokens (npm)
Malicious code in @or-sdk/accounts (npm)
Malicious code in @or-sdk/accounts (npm)
Malicious code in @or-sdk/adapters (npm)
Malicious code in @or-sdk/adapters (npm)
Malicious code in @or-sdk/agents (npm)
Malicious code in @or-sdk/agents (npm)
Malicious code in @onereach/v-event-calendar (npm)
Malicious code in @onereach/v-event-calendar (npm)
Malicious code in @onereach/ui-components-common (npm)
Malicious code in @onereach/ui-components-common (npm)
Malicious code in @onereach/ui-components-vue2 (npm)
Malicious code in @onereach/ui-components-vue2 (npm)
Malicious code in @onereach/ts-memoize (npm)
Malicious code in @onereach/ts-memoize (npm)
Malicious code in @or-sdk/account-settings (npm)
Malicious code in @or-sdk/account-settings (npm)
Malicious code in @onereach/ui-components (npm)
Malicious code in @onereach/ui-components (npm)
Malicious code in @onereach/webform (npm)
Malicious code in @onereach/webform (npm)
Malicious code in @onereach/types-contacts-api (npm)
Malicious code in @onereach/types-contacts-api (npm)
Malicious code in @onereach/step-run-snowflake-query (npm)
Malicious code in @onereach/step-run-snowflake-query (npm)
Malicious code in @onereach/styles (npm)
Malicious code in @onereach/styles (npm)
Malicious code in @onereach/slack-helpers (npm)
Malicious code in @onereach/slack-helpers (npm)
Malicious code in @onereach/si-validated-timestring-input (npm)
Malicious code in @onereach/si-validated-timestring-input (npm)
Malicious code in @onereach/step-components (npm)
Malicious code in @onereach/step-components (npm)
Malicious code in @onereach/ssml-editor (npm)
Malicious code in @onereach/ssml-editor (npm)
Malicious code in @onereach/step-conversation (npm)
Malicious code in @onereach/step-conversation (npm)
Malicious code in @onereach/step-voice (npm)
Malicious code in @onereach/step-voice (npm)
Malicious code in @onereach/si-textinput (npm)
Malicious code in @onereach/si-textinput (npm)
Malicious code in @onereach/si-switch (npm)
Malicious code in @onereach/si-switch (npm)
Malicious code in @onereach/si-text-message (npm)
Malicious code in @onereach/si-text-message (npm)
Malicious code in @onereach/si-radio-group (npm)
Malicious code in @onereach/si-radio-group (npm)
Malicious code in @onereach/si-step-chooser (npm)
Malicious code in @onereach/si-step-chooser (npm)
Malicious code in @onereach/si-dropdown-simple (npm)
Malicious code in @onereach/si-dropdown-simple (npm)
Malicious code in @onereach/si-list (npm)
Malicious code in @onereach/si-list (npm)
Malicious code in @onereach/si-select (npm)
Malicious code in @onereach/si-select (npm)
Malicious code in @onereach/si-dropdown-advanced (npm)
Malicious code in @onereach/si-dropdown-advanced (npm)
Malicious code in @onereach/si-datepicker (npm)
Malicious code in @onereach/si-datepicker (npm)
Malicious code in @onereach/si-merge-tag-input (npm)
Malicious code in @onereach/si-merge-tag-input (npm)
Malicious code in @onereach/si-a-button (npm)
Malicious code in @onereach/si-a-button (npm)
Malicious code in @onereach/si-header (npm)
Malicious code in @onereach/si-header (npm)
Malicious code in @onereach/si-alert (npm)
Malicious code in @onereach/si-alert (npm)
Malicious code in @onereach/si-checkbox-group (npm)
Malicious code in @onereach/si-checkbox-group (npm)
Malicious code in @onereach/si-checkbox (npm)
Malicious code in @onereach/si-checkbox (npm)
Malicious code in @onereach/salesforce-miaw-client (npm)
Malicious code in @onereach/salesforce-miaw-client (npm)
Malicious code in @onereach/si-divider (npm)
Malicious code in @onereach/si-divider (npm)
Malicious code in @onereach/si-collapsible-group (npm)
Malicious code in @onereach/si-collapsible-group (npm)
Malicious code in @onereach/si-code (npm)
Malicious code in @onereach/si-code (npm)
Malicious code in @or-sdk/bots (npm)
Malicious code in @or-sdk/bots (npm)
Malicious code in @onereach/si-root (npm)
Malicious code in @onereach/si-root (npm)
Malicious code in @onereach/si-copyable-text (npm)
Malicious code in @onereach/si-copyable-text (npm)
Malicious code in @onereach/rwc-client (npm)
Malicious code in @onereach/rwc-client (npm)
Malicious code in @onereach/regular-expressions-test (npm)
Malicious code in @onereach/regular-expressions-test (npm)
Malicious code in @onereach/regular-expressions (npm)
Malicious code in @onereach/regular-expressions (npm)
Malicious code in @onereach/orest-vue-demi-vue2 (npm)
Malicious code in @onereach/orest-vue-demi-vue2 (npm)
Malicious code in @onereach/orest-vue-demi-vue3 (npm)
Malicious code in @onereach/orest-vue-demi-vue3 (npm)
Malicious code in @onereach/orest-vue3 (npm)
Malicious code in @onereach/orest-vue3 (npm)
Malicious code in @onereach/postcss-scoped-selector (npm)
Malicious code in @onereach/postcss-scoped-selector (npm)
Malicious code in @onereach/pnpm-audit-junit (npm)
Malicious code in @onereach/pnpm-audit-junit (npm)
Malicious code in @onereach/regex-helper (npm)
Malicious code in @onereach/regex-helper (npm)
Malicious code in @onereach/orest-jest-presets (npm)
Malicious code in @onereach/orest-jest-presets (npm)
Malicious code in @onereach/orest-cli (npm)
Malicious code in @onereach/orest-cli (npm)
Malicious code in @onereach/or-pro (npm)
Malicious code in @onereach/or-pro (npm)
Malicious code in @onereach/orest-input-cli (npm)
Malicious code in @onereach/orest-input-cli (npm)
Malicious code in @onereach/or-sdk-agent-cli (npm)
Malicious code in @onereach/or-sdk-agent-cli (npm)
Malicious code in @onereach/or-file-uploader-next (npm)
Malicious code in @onereach/or-file-uploader-next (npm)
Malicious code in @onereach/or-browser-next (npm)
Malicious code in @onereach/or-browser-next (npm)
Malicious code in @onereach/or-browser (npm)
Malicious code in @onereach/or-browser (npm)
Malicious code in @onereach/or-content-builder-renderer (npm)
Malicious code in @onereach/or-content-builder-renderer (npm)
Malicious code in @onereach/lambda-invocation (npm)
Malicious code in @onereach/lambda-invocation (npm)
Malicious code in @onereach/time-interpreter (npm)
Malicious code in @onereach/time-interpreter (npm)
Malicious code in @onereach/messengers-infobip-sdk (npm)
Malicious code in @onereach/messengers-infobip-sdk (npm)
Malicious code in @onereach/idw-sdk (npm)
Malicious code in @onereach/idw-sdk (npm)
Malicious code in @onereach/idw-init-account-resources (npm)
Malicious code in @onereach/idw-init-account-resources (npm)
Malicious code in @onereach/idw-ui-components (npm)
Malicious code in @onereach/idw-ui-components (npm)
Malicious code in @onereach/content-builder (npm)
Malicious code in @onereach/content-builder (npm)
Malicious code in @onereach/expression-components (npm)
Malicious code in @onereach/expression-components (npm)
Malicious code in @onereach/idw-contracts (npm)
Malicious code in @onereach/idw-contracts (npm)
Malicious code in @onereach/font-icons (npm)
Malicious code in @onereach/font-icons (npm)
Malicious code in @onereach/channel-transformer (npm)
Malicious code in @onereach/channel-transformer (npm)
Malicious code in @onereach/billing-shared (npm)
Malicious code in @onereach/billing-shared (npm)
Malicious code in @onereach/idw-apps (npm)
Malicious code in @onereach/idw-apps (npm)
Malicious code in @onereach/condition-builder (npm)
Malicious code in @onereach/condition-builder (npm)
Malicious code in @onereach/get-version-data (npm)
Malicious code in @onereach/get-version-data (npm)
Malicious code in @onereach/billing-dto (npm)
Malicious code in @onereach/billing-dto (npm)
Malicious code in @nebula.js/stardust (npm)
Malicious code in @nebula.js/stardust (npm)
Malicious code in @keyv/cloudflare-kv (npm)
Malicious code in @keyv/cloudflare-kv (npm)
Malicious code in @onereach/cb-schema-translator (npm)
Malicious code in @onereach/cb-schema-translator (npm)
Malicious code in @nebula.js/sn-tabbed-container (npm)
Malicious code in @nebula.js/sn-tabbed-container (npm)
Malicious code in @nebula.js/snapshooter (npm)
Malicious code in @nebula.js/snapshooter (npm)
Malicious code in @onereach/bandwidth-steps-voice-bxml (npm)
Malicious code in @onereach/bandwidth-steps-voice-bxml (npm)
Malicious code in @nebula.js/theme (npm)
Malicious code in @nebula.js/theme (npm)
Malicious code in @onereach/phonenumber-interpreter (npm)
Malicious code in @onereach/phonenumber-interpreter (npm)
Malicious code in @onereach/channel-transformers (npm)
Malicious code in @onereach/channel-transformers (npm)
Malicious code in @nebula.js/sn-shape (npm)
Malicious code in @nebula.js/sn-shape (npm)
Malicious code in @keyv/bigmap (npm)
Malicious code in @keyv/bigmap (npm)
Malicious code in @nebula.js/sn-slider (npm)
Malicious code in @nebula.js/sn-slider (npm)
Malicious code in @onereach/authorizer-helper (npm)
Malicious code in @onereach/authorizer-helper (npm)
Malicious code in @onereach/content-builder-template-compiler (npm)
Malicious code in @onereach/content-builder-template-compiler (npm)
Malicious code in @nebula.js/test-utils (npm)
Malicious code in @nebula.js/test-utils (npm)
Malicious code in @onereach/ckeditor5-build-classic (npm)
Malicious code in @onereach/ckeditor5-build-classic (npm)
Malicious code in @hubsync/web-sdk-react (npm)
Malicious code in @hubsync/web-sdk-react (npm)
Malicious code in @cacheable/utils (npm)
Malicious code in @cacheable/utils (npm)
Malicious code in @deliveroo/reevent (npm)
Malicious code in @deliveroo/reevent (npm)
Malicious code in @cacheable/node-cache (npm)
Malicious code in @cacheable/node-cache (npm)
Malicious code in @cacheable/memory (npm)
Malicious code in @cacheable/memory (npm)
Malicious code in @deliveroo/determinator (npm)
Malicious code in @deliveroo/determinator (npm)
Malicious code in @nebula.js/sn-distributionplot (npm)
Malicious code in @nebula.js/sn-distributionplot (npm)
Malicious code in @arv-bedrock/auth (npm)
Malicious code in @arv-bedrock/auth (npm)
Malicious code in @arv-bedrock/auth-sso (npm)
Malicious code in @arv-bedrock/auth-sso (npm)
Malicious code in @arv-bedrock/logger (npm)
Malicious code in @arv-bedrock/logger (npm)
Malicious code in @nebula.js/cli-serve (npm)
Malicious code in @nebula.js/cli-serve (npm)
Malicious code in @nebula.js/sn-nav-menu (npm)
Malicious code in @nebula.js/sn-nav-menu (npm)
Malicious code in @nebula.js/cli-build (npm)
Malicious code in @nebula.js/cli-build (npm)
Malicious code in @jsimplify/errno (npm)
Malicious code in @jsimplify/errno (npm)
Malicious code in @nebula.js/cli-sense (npm)
Malicious code in @nebula.js/cli-sense (npm)
Malicious code in @nebula.js/sn-layout-container (npm)
Malicious code in @nebula.js/sn-layout-container (npm)
Malicious code in @adminide-stack/clock-tik-browser (npm)
Malicious code in @adminide-stack/clock-tik-browser (npm)
Malicious code in @nebula.js/sn-action-button (npm)
Malicious code in @nebula.js/sn-action-button (npm)
Malicious code in @nebula.js/sn-listbox (npm)
Malicious code in @nebula.js/sn-listbox (npm)
Malicious code in @adminide-stack/yantra-mobile (npm)
Malicious code in @adminide-stack/yantra-mobile (npm)
Malicious code in @nebula.js/locale (npm)
Malicious code in @nebula.js/locale (npm)
Malicious code in @nebula.js/nucleus (npm)
Malicious code in @nebula.js/nucleus (npm)
Malicious code in @nebula.js/cli (npm)
Malicious code in @nebula.js/cli (npm)
Malicious code in @keyv/serialize-msgpackr (npm)
Malicious code in @keyv/serialize-msgpackr (npm)
Malicious code in @arv-bedrock/auth-sso-backend (npm)
Malicious code in @arv-bedrock/auth-sso-backend (npm)
Malicious code in @keyv/serialize-superjson (npm)
Malicious code in @keyv/serialize-superjson (npm)
Malicious code in @arv-bedrock/auth-admin (npm)
Malicious code in @arv-bedrock/auth-admin (npm)
Malicious code in @cacheable/net (npm)
Malicious code in @cacheable/net (npm)
Malicious code in @keyv/memcache (npm)
Malicious code in @keyv/memcache (npm)
Malicious code in @keyv/redis (npm)
Malicious code in @keyv/redis (npm)
Malicious code in @keyv/mysql (npm)
Malicious code in @keyv/mysql (npm)
Malicious code in @nebula.js/sn-map (npm)
Malicious code in @nebula.js/sn-map (npm)
Malicious code in @keyv/mongo (npm)
Malicious code in @keyv/mongo (npm)
Malicious code in @keyv/dynamo (npm)
Malicious code in @keyv/dynamo (npm)
Malicious code in @nebula.js/sn-line-chart (npm)
Malicious code in @nebula.js/sn-line-chart (npm)
Malicious code in @keyv/encrypt-web (npm)
Malicious code in @keyv/encrypt-web (npm)
Malicious code in @keyv/etcd (npm)
Malicious code in @keyv/etcd (npm)
Malicious code in @keyv/encrypt-node (npm)
Malicious code in @keyv/encrypt-node (npm)
Malicious code in @nebula.js/sn-animator (npm)
Malicious code in @nebula.js/sn-animator (npm)
Malicious code in @keyv/compress-brotli (npm)
Malicious code in @keyv/compress-brotli (npm)
Malicious code in @keyv/compress-lz4 (npm)
Malicious code in @keyv/compress-lz4 (npm)
Malicious code in @keyv/compress-gzip (npm)
Malicious code in @keyv/compress-gzip (npm)
Malicious code in @nebula.js/sn-org-chart (npm)
Malicious code in @nebula.js/sn-org-chart (npm)
Malicious code in twork-data-services-aggregator-api-v2-data-view-company-company-profile-mf-data-transformer (npm)
Malicious code in twork-data-services-aggregator-api-v2-data-view-company-company-profile-mf-data-transformer (npm)
Malicious code in tinkoff-terminal-kit-carousel (npm)
Malicious code in tinkoff-terminal-kit-carousel (npm)
Malicious code in streak-math-abz (npm)
Malicious code in streak-math-abz (npm)
Malicious code in simple-date-formatter-util-9 (npm)
Malicious code in simple-date-formatter-util-9 (npm)
Malicious code in simple-date-formatter-new-5 (npm)
Malicious code in simple-date-formatter-new-5 (npm)
Malicious code in simple-date-formatter-util-15 (npm)
Malicious code in simple-date-formatter-util-15 (npm)
Malicious code in nagixjs (npm)
Malicious code in nagixjs (npm)
Malicious code in eacq-payform-core (npm)
Malicious code in eacq-payform-core (npm)
Malicious code in discord-vibegrations-api-helpers (npm)
Malicious code in discord-vibegrations-api-helpers (npm)
Malicious code in discord-vibegrations-api-natives (npm)
Malicious code in discord-vibegrations-api-natives (npm)
Malicious code in bigops-backend (npm)
Malicious code in bigops-backend (npm)
Malicious code in @zzzgenesis00/xrp-lib (npm)
Malicious code in @zzzgenesis00/xrp-lib (npm)
Malicious code in @zzzgenesis00/solana-web3 (npm)
Malicious code in @zzzgenesis00/solana-web3 (npm)
Malicious code in @zzzgenesis00/crypto-config (npm)
Malicious code in @zzzgenesis00/crypto-config (npm)
Malicious code in @zzzgenesis00/hdkey-wallet (npm)
Malicious code in @zzzgenesis00/hdkey-wallet (npm)
Malicious code in @zzzgenesis00/etherjs (npm)
Malicious code in @zzzgenesis00/etherjs (npm)
Malicious code in @zzzgenesis00/solana-wallet-adapter (npm)
Malicious code in @zzzgenesis00/solana-wallet-adapter (npm)
Malicious code in @ks-openclaw/kim (npm)
Malicious code in @ks-openclaw/kim (npm)
Malicious code in entropyeasybots (npm)
Malicious code in entropyeasybots (npm)
Malicious code in streak-metricsaz (npm)
Malicious code in streak-metricsaz (npm)
Malicious code in nagix-nodejs (npm)
Malicious code in nagix-nodejs (npm)
Malicious code in nagix-node (npm)
Malicious code in nagix-node (npm)
Malicious code in beaver-ui-form (npm)
Malicious code in beaver-ui-form (npm)
XSS in Ghost's ActivityPub client
XSS in Ghost's ActivityPub client
Ghost: Session Fixation in Ghost Admin
Ghost: Session Fixation in Ghost Admin
Ghost: Paid gift memberships obtainable at minimal cost via the donations feature
Ghost: Paid gift memberships obtainable at minimal cost via the donations feature
Ghost: Member existence leak via magic link sign-in response
Ghost: Member existence leak via magic link sign-in response
Ghost: Theme Upload Path Traversal
Ghost: Theme Upload Path Traversal
Ghost: Database Backup Path Traversal
Ghost: Database Backup Path Traversal
Ghost: Blind Password Hash Disclosure in Ghost Admin API
Ghost: Blind Password Hash Disclosure in Ghost Admin API
Ghost: Server-Side Request Forgery in Image Fetching
Ghost: Server-Side Request Forgery in Image Fetching
Malicious code in @servicetitan/titan-chat-ui-cypress (npm)
Malicious code in @servicetitan/titan-chat-ui-cypress (npm)
Malicious code in @servicetitan/eslint-config (npm)
Malicious code in @servicetitan/eslint-config (npm)
Malicious code in @servicetitan/standalone-ui (npm)
Malicious code in @servicetitan/standalone-ui (npm)
Malicious code in internallib_v688 (npm)
Malicious code in internallib_v688 (npm)
Malicious code in @servicetitan/startup-mfe-compat (npm)
Malicious code in @servicetitan/startup-mfe-compat (npm)
Malicious code in @servicetitan/toolbelt-shared-registry (npm)
Malicious code in @servicetitan/toolbelt-shared-registry (npm)
Malicious code in @servicetitan/unit-tests (npm)
Malicious code in @servicetitan/unit-tests (npm)
Malicious code in @servicetitan/responsive (npm)
Malicious code in @servicetitan/responsive (npm)
Malicious code in @servicetitan/table (npm)
Malicious code in @servicetitan/table (npm)
Malicious code in @servicetitan/startup (npm)
Malicious code in @servicetitan/startup (npm)
Malicious code in @servicetitan/titan-chatbot-ui-anvil2 (npm)
Malicious code in @servicetitan/titan-chatbot-ui-anvil2 (npm)
Malicious code in @servicetitan/widget-platform-monolith (npm)
Malicious code in @servicetitan/widget-platform-monolith (npm)
Malicious code in @servicetitan/thoughtspot-theme (npm)
Malicious code in @servicetitan/thoughtspot-theme (npm)
Malicious code in @servicetitan/titan-chatbot-api (npm)
Malicious code in @servicetitan/titan-chatbot-api (npm)
Malicious code in @servicetitan/tokens (npm)
Malicious code in @servicetitan/tokens (npm)
Malicious code in @servicetitan/titan-chat-ui (npm)
Malicious code in @servicetitan/titan-chat-ui (npm)
Malicious code in @servicetitan/titan-chatbot-ui-cypress (npm)
Malicious code in @servicetitan/titan-chatbot-ui-cypress (npm)
Malicious code in @servicetitan/titan-chat-ui-anvil2 (npm)
Malicious code in @servicetitan/titan-chat-ui-anvil2 (npm)
Malicious code in @servicetitan/time-zones (npm)
Malicious code in @servicetitan/time-zones (npm)
Malicious code in @servicetitan/web-components (npm)
Malicious code in @servicetitan/web-components (npm)
Malicious code in @servicetitan/standalone-tm-api (npm)
Malicious code in @servicetitan/standalone-tm-api (npm)
Malicious code in @servicetitan/titan-chatbot-ui (npm)
Malicious code in @servicetitan/titan-chatbot-ui (npm)
Malicious code in @servicetitan/titan-chat-ui-common (npm)
Malicious code in @servicetitan/titan-chat-ui-common (npm)
Malicious code in @servicetitan/uikit-docs (npm)
Malicious code in @servicetitan/uikit-docs (npm)
Malicious code in @servicetitan/skeleton (npm)
Malicious code in @servicetitan/skeleton (npm)
Malicious code in @servicetitan/quick-actions (npm)
Malicious code in @servicetitan/quick-actions (npm)
Malicious code in @servicetitan/startup-jest (npm)
Malicious code in @servicetitan/startup-jest (npm)
Malicious code in @servicetitan/stylelint-config (npm)
Malicious code in @servicetitan/stylelint-config (npm)
Malicious code in @servicetitan/onboarding-ui (npm)
Malicious code in @servicetitan/onboarding-ui (npm)
Malicious code in @servicetitan/widget-platform (npm)
Malicious code in @servicetitan/widget-platform (npm)
Malicious code in @servicetitan/microfront-utils (npm)
Malicious code in @servicetitan/microfront-utils (npm)
Malicious code in @servicetitan/restrict-imports (npm)
Malicious code in @servicetitan/restrict-imports (npm)
Malicious code in @servicetitan/lazy-module (npm)
Malicious code in @servicetitan/lazy-module (npm)
Malicious code in @servicetitan/react-ioc (npm)
Malicious code in @servicetitan/react-ioc (npm)
Malicious code in @servicetitan/schema-comparison (npm)
Malicious code in @servicetitan/schema-comparison (npm)
Malicious code in @servicetitan/standalone-root (npm)
Malicious code in @servicetitan/standalone-root (npm)
Malicious code in @servicetitan/ko-bridge (npm)
Malicious code in @servicetitan/ko-bridge (npm)
Malicious code in @servicetitan/notifications (npm)
Malicious code in @servicetitan/notifications (npm)
Malicious code in @servicetitan/mfe-quick-actions (npm)
Malicious code in @servicetitan/mfe-quick-actions (npm)
Malicious code in @servicetitan/standalone-feature-flags (npm)
Malicious code in @servicetitan/standalone-feature-flags (npm)
Malicious code in @servicetitan/testing-library (npm)
Malicious code in @servicetitan/testing-library (npm)
Malicious code in @servicetitan/marketing-ui (npm)
Malicious code in @servicetitan/marketing-ui (npm)
Malicious code in @servicetitan/kendo-theme (npm)
Malicious code in @servicetitan/kendo-theme (npm)
Malicious code in @servicetitan/grid (npm)
Malicious code in @servicetitan/grid (npm)
Malicious code in @servicetitan/marketing-integration-widgets (npm)
Malicious code in @servicetitan/marketing-integration-widgets (npm)
Malicious code in @servicetitan/microfront-tests (npm)
Malicious code in @servicetitan/microfront-tests (npm)
Malicious code in @servicetitan/startup-utils (npm)
Malicious code in @servicetitan/startup-utils (npm)
Malicious code in @servicetitan/microfront (npm)
Malicious code in @servicetitan/microfront (npm)
Malicious code in @servicetitan/json-render-react (npm)
Malicious code in @servicetitan/json-render-react (npm)
Malicious code in @servicetitan/marketing-global-route (npm)
Malicious code in @servicetitan/marketing-global-route (npm)
Malicious code in @servicetitan/mpa-components (npm)
Malicious code in @servicetitan/mpa-components (npm)
Malicious code in @servicetitan/ld-type-generator (npm)
Malicious code in @servicetitan/ld-type-generator (npm)
Malicious code in @servicetitan/modularpayments-webfields (npm)
Malicious code in @servicetitan/modularpayments-webfields (npm)
Malicious code in @servicetitan/feature-spotlight (npm)
Malicious code in @servicetitan/feature-spotlight (npm)
Malicious code in @servicetitan/form-state (npm)
Malicious code in @servicetitan/form-state (npm)
Malicious code in @servicetitan/intl (npm)
Malicious code in @servicetitan/intl (npm)
Malicious code in @servicetitan/install (npm)
Malicious code in @servicetitan/install (npm)
Malicious code in @servicetitan/help-center (npm)
Malicious code in @servicetitan/help-center (npm)
Malicious code in @servicetitan/eslint-plugin (npm)
Malicious code in @servicetitan/eslint-plugin (npm)
Malicious code in @servicetitan/hash-browser-router (npm)
Malicious code in @servicetitan/hash-browser-router (npm)
Malicious code in @servicetitan/docs-uikit (npm)
Malicious code in @servicetitan/docs-uikit (npm)
Malicious code in @servicetitan/marketing-direct-mail-components (npm)
Malicious code in @servicetitan/marketing-direct-mail-components (npm)
Malicious code in @servicetitan/eslint-plugin-folder-schema (npm)
Malicious code in @servicetitan/eslint-plugin-folder-schema (npm)
Malicious code in @servicetitan/line-item-editor (npm)
Malicious code in @servicetitan/line-item-editor (npm)
Malicious code in @servicetitan/forge (npm)
Malicious code in @servicetitan/forge (npm)
Malicious code in @servicetitan/standalone-core-feature-gates (npm)
Malicious code in @servicetitan/standalone-core-feature-gates (npm)
Malicious code in @servicetitan/eslint-plugin-decorators-declare (npm)
Malicious code in @servicetitan/eslint-plugin-decorators-declare (npm)
Malicious code in @servicetitan/measure-sheet-data (npm)
Malicious code in @servicetitan/measure-sheet-data (npm)
Malicious code in @servicetitan/cp-react-hooks (npm)
Malicious code in @servicetitan/cp-react-hooks (npm)
Malicious code in @servicetitan/launchdarkly-service (npm)
Malicious code in @servicetitan/launchdarkly-service (npm)
Malicious code in @servicetitan/dte-unlayer (npm)
Malicious code in @servicetitan/dte-unlayer (npm)
Malicious code in @servicetitan/cp-mfe (npm)
Malicious code in @servicetitan/cp-mfe (npm)
Malicious code in @servicetitan/data-query (npm)
Malicious code in @servicetitan/data-query (npm)
Malicious code in @servicetitan/dte-pdf-editor (npm)
Malicious code in @servicetitan/dte-pdf-editor (npm)
Malicious code in @servicetitan/eslint-plugin-mobx-6 (npm)
Malicious code in @servicetitan/eslint-plugin-mobx-6 (npm)
Malicious code in @servicetitan/cp-ui (npm)
Malicious code in @servicetitan/cp-ui (npm)
Malicious code in @servicetitan/hammer-icon (npm)
Malicious code in @servicetitan/hammer-icon (npm)
Malicious code in @servicetitan/html-sketchapp (npm)
Malicious code in @servicetitan/html-sketchapp (npm)
Malicious code in @servicetitan/culture (npm)
Malicious code in @servicetitan/culture (npm)
Malicious code in @servicetitan/contentful-proxy (npm)
Malicious code in @servicetitan/contentful-proxy (npm)
Malicious code in @servicetitan/docs-anvil-uikit-contrib (npm)
Malicious code in @servicetitan/docs-anvil-uikit-contrib (npm)
Malicious code in @servicetitan/eh-module-communication (npm)
Malicious code in @servicetitan/eh-module-communication (npm)
Malicious code in osinthell (npm)
Malicious code in osinthell (npm)
Malicious code in @servicetitan/cp-api (npm)
Malicious code in @servicetitan/cp-api (npm)
Malicious code in @servicetitan/marketing-widgets (npm)
Malicious code in @servicetitan/marketing-widgets (npm)
Malicious code in @servicetitan/cp-mfe-dev (npm)
Malicious code in @servicetitan/cp-mfe-dev (npm)
Malicious code in @servicetitan/form (npm)
Malicious code in @servicetitan/form (npm)
Malicious code in @servicetitan/anvil2-mcp (npm)
Malicious code in @servicetitan/anvil2-mcp (npm)
Malicious code in @servicetitan/component-usage (npm)
Malicious code in @servicetitan/component-usage (npm)
Malicious code in @servicetitan/carto-tokens (npm)
Malicious code in @servicetitan/carto-tokens (npm)
Malicious code in @servicetitan/anvil2-ext-mwv (npm)
Malicious code in @servicetitan/anvil2-ext-mwv (npm)
Malicious code in @servicetitan/carto-charts-react (npm)
Malicious code in @servicetitan/carto-charts-react (npm)
Malicious code in @servicetitan/assist-ui (npm)
Malicious code in @servicetitan/assist-ui (npm)
Malicious code in @servicetitan/folder-lint (npm)
Malicious code in @servicetitan/folder-lint (npm)
Malicious code in @servicetitan/contentful (npm)
Malicious code in @servicetitan/contentful (npm)
Malicious code in @servicetitan/anvil-token (npm)
Malicious code in @servicetitan/anvil-token (npm)
Malicious code in @servicetitan/carto-rn-kit (npm)
Malicious code in @servicetitan/carto-rn-kit (npm)
Malicious code in @servicetitan/anvil2-illustrations (npm)
Malicious code in @servicetitan/anvil2-illustrations (npm)
Malicious code in @servicetitan/anvil-icon (npm)
Malicious code in @servicetitan/anvil-icon (npm)
Malicious code in @servicetitan/anvil2-ext-atlas (npm)
Malicious code in @servicetitan/anvil2-ext-atlas (npm)
Malicious code in @servicetitan/anvil2-codemods (npm)
Malicious code in @servicetitan/anvil2-codemods (npm)
Malicious code in @servicetitan/admin-sql-table (npm)
Malicious code in @servicetitan/admin-sql-table (npm)
Malicious code in @servicetitan/carto-charts-core (npm)
Malicious code in @servicetitan/carto-charts-core (npm)
Malicious code in @servicetitan/anvil-react (npm)
Malicious code in @servicetitan/anvil-react (npm)
Malicious code in @servicetitan/anvil2-ext-common (npm)
Malicious code in @servicetitan/anvil2-ext-common (npm)
Malicious code in @servicetitan/assist-utils (npm)
Malicious code in @servicetitan/assist-utils (npm)
Malicious code in @servicetitan/anvil-themes (npm)
Malicious code in @servicetitan/anvil-themes (npm)
Malicious code in @servicetitan/anvil-css-utilities (npm)
Malicious code in @servicetitan/anvil-css-utilities (npm)
Malicious code in @servicetitan/carto-charts-rn (npm)
Malicious code in @servicetitan/carto-charts-rn (npm)
Malicious code in @servicetitan/anvil-fonts (npm)
Malicious code in @servicetitan/anvil-fonts (npm)
Malicious code in @servicetitan/anvil-icons (npm)
Malicious code in @servicetitan/anvil-icons (npm)
Malicious code in @servicetitan/anvil2-ext-charts (npm)
Malicious code in @servicetitan/anvil2-ext-charts (npm)
Malicious code in @servicetitan/anvil2 (npm)
Malicious code in @servicetitan/anvil2 (npm)
Malicious code in @ornikar/eslint-plugin-ornikar (npm)
Malicious code in @ornikar/eslint-plugin-ornikar (npm)
Malicious code in @servicetitan/tanstack-query-mobx (npm)
Malicious code in @servicetitan/tanstack-query-mobx (npm)
Malicious code in @servicetitan/link-item (npm)
Malicious code in @servicetitan/link-item (npm)
Malicious code in @ornikar/jest-config (npm)
Malicious code in @ornikar/jest-config (npm)
Malicious code in @servicetitan/ajax-handlers (npm)
Malicious code in @servicetitan/ajax-handlers (npm)
Malicious code in @servicetitan/error-boundary (npm)
Malicious code in @servicetitan/error-boundary (npm)
Malicious code in @qlik/eslint-config-vue (npm)
Malicious code in @qlik/eslint-config-vue (npm)
Malicious code in @servicetitan/hammer-react (npm)
Malicious code in @servicetitan/hammer-react (npm)
Malicious code in @servicetitan/temporal-lite (npm)
Malicious code in @servicetitan/temporal-lite (npm)
Malicious code in @servicetitan/log-service (npm)
Malicious code in @servicetitan/log-service (npm)
Malicious code in @servicetitan/acquisition-functions (npm)
Malicious code in @servicetitan/acquisition-functions (npm)
Malicious code in @servicetitan/examples (npm)
Malicious code in @servicetitan/examples (npm)
Malicious code in @servicetitan/titan-chatbot-client (npm)
Malicious code in @servicetitan/titan-chatbot-client (npm)
Malicious code in @servicetitan/confirm (npm)
Malicious code in @servicetitan/confirm (npm)
Malicious code in @servicetitan/suppress-warnings (npm)
Malicious code in @servicetitan/suppress-warnings (npm)
Malicious code in @servicetitan/moneyout-api-client (npm)
Malicious code in @servicetitan/moneyout-api-client (npm)
Malicious code in @servicetitan/micro-frontend (npm)
Malicious code in @servicetitan/micro-frontend (npm)
Malicious code in @servicetitan/navigation (npm)
Malicious code in @servicetitan/navigation (npm)
Malicious code in @servicetitan/hammer-token (npm)
Malicious code in @servicetitan/hammer-token (npm)
Malicious code in @servicetitan/react-hooks (npm)
Malicious code in @servicetitan/react-hooks (npm)
Malicious code in @servicetitan/datadog-rum (npm)
Malicious code in @servicetitan/datadog-rum (npm)
Malicious code in @servicetitan/carto-react-kit (npm)
Malicious code in @servicetitan/carto-react-kit (npm)
Malicious code in @servicetitan/eslint-plugin-processors-stub (npm)
Malicious code in @servicetitan/eslint-plugin-processors-stub (npm)
Malicious code in @servicetitan/confirm-navigation (npm)
Malicious code in @servicetitan/confirm-navigation (npm)
Malicious code in @servicetitan/datetime-utils (npm)
Malicious code in @servicetitan/datetime-utils (npm)
Malicious code in @servicetitan/va-mfe-loader (npm)
Malicious code in @servicetitan/va-mfe-loader (npm)
Malicious code in @servicetitan/microfront-auth (npm)
Malicious code in @servicetitan/microfront-auth (npm)
Malicious code in @servicetitan/marketing-route (npm)
Malicious code in @servicetitan/marketing-route (npm)
Malicious code in @servicetitan/design-system (npm)
Malicious code in @servicetitan/design-system (npm)
Malicious code in @servicetitan/marketing-email-components (npm)
Malicious code in @servicetitan/marketing-email-components (npm)
Malicious code in @servicetitan/document-title (npm)
Malicious code in @servicetitan/document-title (npm)
Malicious code in @servicetitan/admin-layout (npm)
Malicious code in @servicetitan/admin-layout (npm)
Malicious code in @servicetitan/marketing-form (npm)
Malicious code in @servicetitan/marketing-form (npm)
Malicious code in @ornikar/eslint-config-typescript-nestjs (npm)
Malicious code in @ornikar/eslint-config-typescript-nestjs (npm)
Malicious code in @ornikar/eslint-config-babel-use (npm)
Malicious code in @ornikar/eslint-config-babel-use (npm)
Malicious code in @ornikar/eslint-config-node (npm)
Malicious code in @ornikar/eslint-config-node (npm)
Malicious code in @ornikar/babel-preset-base (npm)
Malicious code in @ornikar/babel-preset-base (npm)
Malicious code in @ornikar/commitlint-config (npm)
Malicious code in @ornikar/commitlint-config (npm)
Malicious code in @ornikar/eslint-config-typescript (npm)
Malicious code in @ornikar/eslint-config-typescript (npm)
Malicious code in @ornikar/eslint-config-react (npm)
Malicious code in @ornikar/eslint-config-react (npm)
Malicious code in @ornikar/eslint-config (npm)
Malicious code in @ornikar/eslint-config (npm)
Malicious code in @ornikar/eslint-plugin-neverthrow (npm)
Malicious code in @ornikar/eslint-plugin-neverthrow (npm)
Malicious code in @ornikar/eslint-config-typescript-react (npm)
Malicious code in @ornikar/eslint-config-typescript-react (npm)
Malicious code in @ornikar/browserslist-config (npm)
Malicious code in @ornikar/browserslist-config (npm)
Malicious code in @ornikar/babel-preset-kitt-universal (npm)
Malicious code in @ornikar/babel-preset-kitt-universal (npm)
Malicious code in @ornikar/eslint-config-formatjs (npm)
Malicious code in @ornikar/eslint-config-formatjs (npm)
Malicious code in @ornikar/stylelint-config (npm)
Malicious code in @ornikar/stylelint-config (npm)
Malicious code in @ornikar/webpack-config (npm)
Malicious code in @ornikar/webpack-config (npm)
Malicious code in @ornikar/eslint-config-babel (npm)
Malicious code in @ornikar/eslint-config-babel (npm)
Malicious code in @ornikar/lerna-config (npm)
Malicious code in @ornikar/lerna-config (npm)
Malicious code in @ornikar/typed-css-modules-loader (npm)
Malicious code in @ornikar/typed-css-modules-loader (npm)
Malicious code in @ornikar/apollo-link-timeout (npm)
Malicious code in @ornikar/apollo-link-timeout (npm)
Malicious code in @ornikar/repo-config (npm)
Malicious code in @ornikar/repo-config (npm)
Malicious code in @ornikar/renovate-config (npm)
Malicious code in @ornikar/renovate-config (npm)
Malicious code in @ornikar/storybook-config (npm)
Malicious code in @ornikar/storybook-config (npm)
Malicious code in @ornikar/react-native-svg-transformer (npm)
Malicious code in @ornikar/react-native-svg-transformer (npm)
Malicious code in @ornikar/react-modern-calendar-datepicker (npm)
Malicious code in @ornikar/react-modern-calendar-datepicker (npm)
Malicious code in @ornikar/babel-preset-react (npm)
Malicious code in @ornikar/babel-preset-react (npm)
Malicious code in @ornikar/repo-config-react-legacy-css (npm)
Malicious code in @ornikar/repo-config-react-legacy-css (npm)
Malicious code in @ornikar/jest-config-react-native (npm)
Malicious code in @ornikar/jest-config-react-native (npm)
Malicious code in @ornikar/rollup-plugin-postcss (npm)
Malicious code in @ornikar/rollup-plugin-postcss (npm)
Malicious code in @ornikar/monorepo-config (npm)
Malicious code in @ornikar/monorepo-config (npm)
Malicious code in @ornikar/slate-react-fork (npm)
Malicious code in @ornikar/slate-react-fork (npm)
Malicious code in @ornikar/repo-config-react (npm)
Malicious code in @ornikar/repo-config-react (npm)
Malicious code in @ornikar/graphql-config (npm)
Malicious code in @ornikar/graphql-config (npm)
Malicious code in @ornikar/jest-config-react (npm)
Malicious code in @ornikar/jest-config-react (npm)
Malicious code in @ornikar/prettier-config (npm)
Malicious code in @ornikar/prettier-config (npm)
Malicious code in @ornikar/intl-config (npm)
Malicious code in @ornikar/intl-config (npm)
Malicious code in @ornikar/kitt2 (npm)
Malicious code in @ornikar/kitt2 (npm)
Malicious code in @ornikar/postcss-config (npm)
Malicious code in @ornikar/postcss-config (npm)
Malicious code in @ornikar/rollup-config (npm)
Malicious code in @ornikar/rollup-config (npm)
Malicious code in @ornikar/jest-config-react-native-web (npm)
Malicious code in @ornikar/jest-config-react-native-web (npm)
Malicious code in @ornikar/prismic-components (npm)
Malicious code in @ornikar/prismic-components (npm)
Malicious code in pob-test-package-in-monorepo (npm)
Malicious code in pob-test-package-in-monorepo (npm)
Malicious code in picasso-plugin-q (npm)
Malicious code in picasso-plugin-q (npm)
Malicious code in native-frontend-orb (npm)
Malicious code in native-frontend-orb (npm)
Malicious code in picasso-plugin-hammer (npm)
Malicious code in picasso-plugin-hammer (npm)
Malicious code in rwc-client (npm)
Malicious code in rwc-client (npm)
Malicious code in qlik-modifiers (npm)
Malicious code in qlik-modifiers (npm)
Malicious code in tslint-folder-schema (npm)
Malicious code in tslint-folder-schema (npm)
Malicious code in frontend-orb (npm)
Malicious code in frontend-orb (npm)
Malicious code in pob-test-typescript-package-in-monorepo (npm)
Malicious code in pob-test-typescript-package-in-monorepo (npm)
Malicious code in qlik-chart-modules (npm)
Malicious code in qlik-chart-modules (npm)
Ghost: File Upload Content-Type Spoofing
Ghost: File Upload Content-Type Spoofing
ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks
ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks
Malicious code in beaver-ui-layout (npm)
Malicious code in beaver-ui-layout (npm)
undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives
undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives
undici vulnerable to CRLF Injection via blob-like body 'type' property
undici vulnerable to CRLF Injection via blob-like body 'type' property
Malicious code in internallib_v524 (npm)
Malicious code in internallib_v524 (npm)
fast-uri vulnerable to host confusion via backslash authority introducer
fast-uri vulnerable to host confusion via backslash authority introducer
ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass
ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass
ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks
ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks
Malicious code in tailwind-anim (npm)
Malicious code in tailwind-anim (npm)
brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation
brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation
Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes
Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes
Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)
Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)
Socket.IO: Zero-attachment Memory Exhaustion
Socket.IO: Zero-attachment Memory Exhaustion
Malicious code in beaver-ui-header (npm)
Malicious code in beaver-ui-header (npm)
Malicious code in accounts-final-form (npm)
Malicious code in accounts-final-form (npm)
Hono: ReDoS in CORS middleware via Access-Control-Request-Headers
Hono: ReDoS in CORS middleware via Access-Control-Request-Headers
Sequelize: SQL Injection (Oracle DB)
Sequelize: SQL Injection (Oracle DB)
Malicious code in lifestyle-test-utils (npm)
Malicious code in lifestyle-test-utils (npm)
Malicious code in beaver-ui-grid (npm)
Malicious code in beaver-ui-grid (npm)
Malicious code in beaver-ui-items-with-more (npm)
Malicious code in beaver-ui-items-with-more (npm)
PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset
PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset
Malicious code in simple-date-formatter-util-5 (npm)
Malicious code in simple-date-formatter-util-5 (npm)
Malicious code in accounts-loading-state (npm)
Malicious code in accounts-loading-state (npm)
undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives
undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives
Malicious code in internallib_v568 (npm)
Malicious code in internallib_v568 (npm)
Malicious code in bigops-chat-messages (npm)
Malicious code in bigops-chat-messages (npm)
undici vulnerable to downstream response desynchronization via retry interceptor
undici vulnerable to downstream response desynchronization via retry interceptor
Malicious code in beaver-ui-date-range-picker (npm)
Malicious code in beaver-ui-date-range-picker (npm)
undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields
undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields
Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning
Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning
Malicious code in simple-date-formatter-new-1 (npm)
Malicious code in simple-date-formatter-new-1 (npm)
Malicious code in list-issue-predecessor-dependencies-block (npm)
Malicious code in list-issue-predecessor-dependencies-block (npm)
Malicious code in simple-date-formatter-util (npm)
Malicious code in simple-date-formatter-util (npm)
Malicious code in simple-date-formatter-util-2 (npm)
Malicious code in simple-date-formatter-util-2 (npm)
Malicious code in simple-date-formatter-util-1 (npm)
Malicious code in simple-date-formatter-util-1 (npm)
Malicious code in @custombots/custombot (npm)
Malicious code in @custombots/custombot (npm)
Malicious code in tailwindcss-anim (npm)
Malicious code in tailwindcss-anim (npm)
Malicious code in pp-react-worldready (npm)
Malicious code in pp-react-worldready (npm)
Malicious code in test-dev-host (npm)
Malicious code in test-dev-host (npm)
Malicious code in test-dev-store (npm)
Malicious code in test-dev-store (npm)
Malicious code in test-dev-watch (npm)
Malicious code in test-dev-watch (npm)
Malicious code in test-dev-dispatch (npm)
Malicious code in test-dev-dispatch (npm)
Malicious code in test-dev-boot (npm)
Malicious code in test-dev-boot (npm)
Malicious code in test-dev-sync (npm)
Malicious code in test-dev-sync (npm)
Malicious code in test-dev-link (npm)
Malicious code in test-dev-link (npm)
Malicious code in @moxfive-llc/common (npm)
Malicious code in @moxfive-llc/common (npm)
Malicious code in test-dev-exec (npm)
Malicious code in test-dev-exec (npm)
@phun-ky/defaults-deep Has a Prototype Pollution issue via Unsafe Recursive Property Merging
@phun-ky/defaults-deep Has a Prototype Pollution issue via Unsafe Recursive Property Merging
Malicious code in vcse (npm)
Malicious code in vcse (npm)
Jodit Editor: Mutation XSS in jodit clean-html via a MathML/style rawtext carrier
Jodit Editor: Mutation XSS in jodit clean-html via a MathML/style rawtext carrier
`@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocation
`@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocation
Jodit has cross-site scripting (XSS) via <script> nested in SVG that bypasses clean-html sanitization
Jodit has cross-site scripting (XSS) via <script> nested in SVG that bypasses clean-html sanitization
hashi-vault-js has a path traversal and query parameter injection
hashi-vault-js has a path traversal and query parameter injection
Malicious code in @0xlr/test-callback (npm)
Malicious code in @0xlr/test-callback (npm)
@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into Script Tag
@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into Script Tag
Jodit has incomplete javascript: scheme normalization in sanitizeHTMLElement href check that allows link XSS
Jodit has incomplete javascript: scheme normalization in sanitizeHTMLElement href check that allows link XSS
Apostrophe has Server-Side Prototype Pollution in apos.util.set via patch operators that leads to process-wide authorization bypass
Apostrophe has Server-Side Prototype Pollution in apos.util.set via patch operators that leads to process-wide authorization bypass
Malicious code in vite-tsconfig-svg (npm)
Malicious code in vite-tsconfig-svg (npm)
@dynatrace-oss/dynatrace-mcp-server has a DQL injection via parameters not documented as DQL
@dynatrace-oss/dynatrace-mcp-server has a DQL injection via parameters not documented as DQL
@apostrophecms/file pretty-URL Vulnerable to Unauthenticated SSRF via Host header
@apostrophecms/file pretty-URL Vulnerable to Unauthenticated SSRF via Host header
NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE
NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE
Malicious code in asdsafsafdasdsaasdasda (npm)
Malicious code in asdsafsafdasdsaasdasda (npm)
Malicious code in vite-config-svg (npm)
Malicious code in vite-config-svg (npm)
Malicious code in mcp-server-boilerplate (npm)
Malicious code in mcp-server-boilerplate (npm)
Malicious code in polyprompt (npm)
Malicious code in polyprompt (npm)
Malicious code in @0xlr/dep-confusion-poc (npm)
Malicious code in @0xlr/dep-confusion-poc (npm)
Malicious code in attio-discover (npm)
Malicious code in attio-discover (npm)
Malicious code in socketi (npm)
Malicious code in socketi (npm)
Malicious code in community-published (npm)
Malicious code in community-published (npm)
Malicious code in create-remotion (npm)
Malicious code in create-remotion (npm)
sanitize-html has incomplete URI scheme validation in that allows javascript: URIs through action, formaction, data, poster, and background attributes
sanitize-html has incomplete URI scheme validation in that allows javascript: URIs through action, formaction, data, poster, and background attributes
Malicious code in capacitor-assets (npm)
Malicious code in capacitor-assets (npm)
Malicious code in refbase-mcp (npm)
Malicious code in refbase-mcp (npm)
Malicious code in rollup-plugin-polyfill-hold (npm)
Malicious code in rollup-plugin-polyfill-hold (npm)
Malicious code in socktio (npm)
Malicious code in socktio (npm)
Malicious code in scketio (npm)
Malicious code in scketio (npm)
Malicious code in smart-npv-mcp (npm)
Malicious code in smart-npv-mcp (npm)
Malicious code in ai-backup-script (npm)
Malicious code in ai-backup-script (npm)
Malicious code in passtpor (npm)
Malicious code in passtpor (npm)
Malicious code in maximumsats-mcp (npm)
Malicious code in maximumsats-mcp (npm)
Malicious code in passsport1 (npm)
Malicious code in passsport1 (npm)
Malicious code in iwomm-mcp (npm)
Malicious code in iwomm-mcp (npm)
Malicious code in asdsafsadad (npm)
Malicious code in asdsafsadad (npm)
Malicious code in pm-claude-skills-mcp (npm)
Malicious code in pm-claude-skills-mcp (npm)
Malicious code in paraglide-js (npm)
Malicious code in paraglide-js (npm)
Malicious code in metrics-ui (npm)
Malicious code in metrics-ui (npm)
Malicious code in rollup-plugin-polyfill-helper (npm)
Malicious code in rollup-plugin-polyfill-helper (npm)
Malicious code in kip-mcp-http (npm)
Malicious code in kip-mcp-http (npm)
Malicious code in install-native-host (npm)
Malicious code in install-native-host (npm)
Malicious code in iac-scanner (npm)
Malicious code in iac-scanner (npm)
Malicious code in sap-mcp-facilitator (npm)
Malicious code in sap-mcp-facilitator (npm)
Malicious code in soccketio (npm)
Malicious code in soccketio (npm)
Malicious code in @meli-testing/jest-react (npm)
Malicious code in @meli-testing/jest-react (npm)
Malicious code in @0xlr/question-types (npm)
Malicious code in @0xlr/question-types (npm)
Malicious code in @cr-invested-ui-components/chart (npm)
Malicious code in @cr-invested-ui-components/chart (npm)
Malicious code in @fuji-web-components/maps (npm)
Malicious code in @fuji-web-components/maps (npm)
Malicious code in @mp-op-ss-front-lib/tracks (npm)
Malicious code in @mp-op-ss-front-lib/tracks (npm)
Malicious code in @finance-ui/finance-view (npm)
Malicious code in @finance-ui/finance-view (npm)
Malicious code in @mplay-frontend-ui/link (npm)
Malicious code in @mplay-frontend-ui/link (npm)
Malicious code in @finance-ui/snackbar-ifpe (npm)
Malicious code in @finance-ui/snackbar-ifpe (npm)
Malicious code in @global-theme/context (npm)
Malicious code in @global-theme/context (npm)
Malicious code in @peptide-packets/js-unimode (npm)
Malicious code in @peptide-packets/js-unimode (npm)
Malicious code in mongostose (npm)
Malicious code in mongostose (npm)
Malicious code in allurectl (npm)
Malicious code in allurectl (npm)
Malicious code in chaos-mcp (npm)
Malicious code in chaos-mcp (npm)
Malicious code in hit-mcp (npm)
Malicious code in hit-mcp (npm)
Malicious code in @mplay-core-lib/utilities (npm)
Malicious code in @mplay-core-lib/utilities (npm)
Malicious code in @nordic-dev/linting-tools (npm)
Malicious code in @nordic-dev/linting-tools (npm)
Malicious code in eth-bridge (npm)
Malicious code in eth-bridge (npm)
Malicious code in fast-csv-helper (npm)
Malicious code in fast-csv-helper (npm)
Malicious code in moontose (npm)
Malicious code in moontose (npm)
Malicious code in @spending-behavior-ui/cashflow-widget (npm)
Malicious code in @spending-behavior-ui/cashflow-widget (npm)
Malicious code in sap-mcp-config (npm)
Malicious code in sap-mcp-config (npm)
Malicious code in @spending-behavior-ui/widget-insights (npm)
Malicious code in @spending-behavior-ui/widget-insights (npm)
Malicious code in @one-chat/react (npm)
Malicious code in @one-chat/react (npm)
Malicious code in @peptide-packets/peptide-modify (npm)
Malicious code in @peptide-packets/peptide-modify (npm)
Malicious code in hazmat-cfr (npm)
Malicious code in hazmat-cfr (npm)
Malicious code in routerbase-mcp (npm)
Malicious code in routerbase-mcp (npm)
Malicious code in @sw-commons-components/message-upsell (npm)
Malicious code in @sw-commons-components/message-upsell (npm)
Malicious code in goldenflow-js (npm)
Malicious code in goldenflow-js (npm)
Malicious code in adpanel-core (npm)
Malicious code in adpanel-core (npm)
Malicious code in gtm-mcp-auth (npm)
Malicious code in gtm-mcp-auth (npm)
@dynatrace-oss/dynatrace-mcp-server has a workflow template injection via create_workflow_for_notification
@dynatrace-oss/dynatrace-mcp-server has a workflow template injection via create_workflow_for_notification
Jodit has prototype pollution via Jodit.configure() / ConfigMerge
Jodit has prototype pollution via Jodit.configure() / ConfigMerge
dssrf: any users using 1.1.1.1 DNS is impacted by SSRF
dssrf: any users using 1.1.1.1 DNS is impacted by SSRF
`nx graph` dev server permissive CORS policy
`nx graph` dev server permissive CORS policy
Malicious code in @404c3s4r/lodash (npm)
Malicious code in @404c3s4r/lodash (npm)
re2: Global `String.prototype.match` with an empty-matchable pattern never advances → infinite loop with unbounded native memory growth (DoS)
re2: Global `String.prototype.match` with an empty-matchable pattern never advances → infinite loop with unbounded native memory growth (DoS)
Malicious code in @sof-assistant-fe-lib/vertical-faqs (npm)
Malicious code in @sof-assistant-fe-lib/vertical-faqs (npm)
re2: Out-of-bounds heap read in `exec`/`test`/`match` via attacker-influenced `lastIndex` on a non-ASCII subject → uncatchable process crash (DoS)
re2: Out-of-bounds heap read in `exec`/`test`/`match` via attacker-influenced `lastIndex` on a non-ASCII subject → uncatchable process crash (DoS)
Malicious code in compose-logger-stand (npm)
Malicious code in compose-logger-stand (npm)
Malicious code in hjw-nasa-lib (npm)
Malicious code in hjw-nasa-lib (npm)
Malicious code in clo321 (npm)
Malicious code in clo321 (npm)
Malicious code in clo321-server (npm)
Malicious code in clo321-server (npm)
Malicious code in cross-sell (npm)
Malicious code in cross-sell (npm)
Malicious code in cmd-auth (npm)
Malicious code in cmd-auth (npm)
Malicious code in confetti-rebuilds (npm)
Malicious code in confetti-rebuilds (npm)
Malicious code in columns_changed (npm)
Malicious code in columns_changed (npm)
Malicious code in cocktail-lib (npm)
Malicious code in cocktail-lib (npm)
Malicious code in clotest (npm)
Malicious code in clotest (npm)
Malicious code in @goodjavascript/dotenv (npm)
Malicious code in @goodjavascript/dotenv (npm)
Malicious code in create-backend-scaffold (npm)
Malicious code in create-backend-scaffold (npm)
Malicious code in thedata (npm)
Malicious code in thedata (npm)
Malicious code in pretty-log-cli (npm)
Malicious code in pretty-log-cli (npm)
Malicious code in ecto-logger (npm)
Malicious code in ecto-logger (npm)
Malicious code in n8n-nodes-trust-me-im-totally-safe (npm)
Malicious code in n8n-nodes-trust-me-im-totally-safe (npm)
Malicious code in litespeed-cache (npm)
Malicious code in litespeed-cache (npm)
Malicious code in @wbnr/design (npm)
Malicious code in @wbnr/design (npm)
Malicious code in ethers.json (npm)
Malicious code in ethers.json (npm)
Malicious code in logform-core (npm)
Malicious code in logform-core (npm)
Malicious code in apihost (npm)
Malicious code in apihost (npm)
Malicious code in shsk (npm)
Malicious code in shsk (npm)
Malicious code in tailwindcsssss (npm)
Malicious code in tailwindcsssss (npm)
Malicious code in srgb-linear (npm)
Malicious code in srgb-linear (npm)
Malicious code in spectral-corsair (npm)
Malicious code in spectral-corsair (npm)
Malicious code in streak-metrics-math (npm)
Malicious code in streak-metrics-math (npm)
Malicious code in tgnode (npm)
Malicious code in tgnode (npm)
Malicious code in slowest-build-nodes (npm)
Malicious code in slowest-build-nodes (npm)
Malicious code in rshell (npm)
Malicious code in rshell (npm)
Malicious code in rumjs (npm)
Malicious code in rumjs (npm)
Malicious code in rlp.git (npm)
Malicious code in rlp.git (npm)
Malicious code in react.j (npm)
Malicious code in react.j (npm)
Malicious code in react-fast-refresh-helper (npm)
Malicious code in react-fast-refresh-helper (npm)
Malicious code in reac.js (npm)
Malicious code in reac.js (npm)
Malicious code in react-ag-grid (npm)
Malicious code in react-ag-grid (npm)
Malicious code in raydiums (npm)
Malicious code in raydiums (npm)
Malicious code in puppetewebr (npm)
Malicious code in puppetewebr (npm)
Malicious code in rlp-master (npm)
Malicious code in rlp-master (npm)
Malicious code in reakt.js (npm)
Malicious code in reakt.js (npm)
Malicious code in streak-metrics-core (npm)
Malicious code in streak-metrics-core (npm)
Malicious code in pullingpackageeeeeeeeeee (npm)
Malicious code in pullingpackageeeeeeeeeee (npm)
Malicious code in rph-validator (npm)
Malicious code in rph-validator (npm)
Malicious code in pullingpackageeeeeee (npm)
Malicious code in pullingpackageeeeeee (npm)
Malicious code in pullingpackageeeeeeeee (npm)
Malicious code in pullingpackageeeeeeeee (npm)
Malicious code in pullingpackageee (npm)
Malicious code in pullingpackageee (npm)
Malicious code in pullingpackageeeeeeeeee (npm)
Malicious code in pullingpackageeeeeeeeee (npm)
Malicious code in pullingpackagee (npm)
Malicious code in pullingpackagee (npm)
Malicious code in pulleeelll (npm)
Malicious code in pulleeelll (npm)
Malicious code in pullingpackaged (npm)
Malicious code in pullingpackaged (npm)
Malicious code in react.ja (npm)
Malicious code in react.ja (npm)
Malicious code in chalk-butons (npm)
Malicious code in chalk-butons (npm)
Malicious code in payu-node (npm)
Malicious code in payu-node (npm)
Malicious code in pretierr (npm)
Malicious code in pretierr (npm)
Malicious code in pullingpackageeeeeeee (npm)
Malicious code in pullingpackageeeeeeee (npm)
Malicious code in qserver (npm)
Malicious code in qserver (npm)
Malicious code in chalk-buttons (npm)
Malicious code in chalk-buttons (npm)
Malicious code in node-fs-extra-master (npm)
Malicious code in node-fs-extra-master (npm)
Malicious code in react.jd (npm)
Malicious code in react.jd (npm)
Malicious code in npum (npm)
Malicious code in npum (npm)
Malicious code in pjm-dls (npm)
Malicious code in pjm-dls (npm)
Malicious code in ncc-web (npm)
Malicious code in ncc-web (npm)
Malicious code in page_colors (npm)
Malicious code in page_colors (npm)
Malicious code in pullingpackage (npm)
Malicious code in pullingpackage (npm)
Malicious code in node-fetch-core (npm)
Malicious code in node-fetch-core (npm)
Malicious code in ncc-hyperapp (npm)
Malicious code in ncc-hyperapp (npm)
Malicious code in node-logger-winston (npm)
Malicious code in node-logger-winston (npm)
Malicious code in n158 (npm)
Malicious code in n158 (npm)
Malicious code in model-data-cache-service (npm)
Malicious code in model-data-cache-service (npm)
Malicious code in malxios (npm)
Malicious code in malxios (npm)
Malicious code in kajl (npm)
Malicious code in kajl (npm)
Malicious code in live-reload-on-error (npm)
Malicious code in live-reload-on-error (npm)
Malicious code in js-focus-within (npm)
Malicious code in js-focus-within (npm)
Malicious code in installreact (npm)
Malicious code in installreact (npm)
Malicious code in impv (npm)
Malicious code in impv (npm)
Malicious code in clo2 (npm)
Malicious code in clo2 (npm)
Malicious code in imut-set (npm)
Malicious code in imut-set (npm)
Malicious code in ncc-fonts (npm)
Malicious code in ncc-fonts (npm)
Malicious code in host-inspector-module (npm)
Malicious code in host-inspector-module (npm)
Malicious code in fs-extra-master (npm)
Malicious code in fs-extra-master (npm)
Malicious code in merg-descripters (npm)
Malicious code in merg-descripters (npm)
Malicious code in ideascloud (npm)
Malicious code in ideascloud (npm)
Malicious code in fwf (npm)
Malicious code in fwf (npm)
Malicious code in fsextrra (npm)
Malicious code in fsextrra (npm)
Malicious code in maalxios (npm)
Malicious code in maalxios (npm)
Malicious code in files-bucket-server (npm)
Malicious code in files-bucket-server (npm)
Malicious code in chalk-helper (npm)
Malicious code in chalk-helper (npm)
Malicious code in gatorhelper (npm)
Malicious code in gatorhelper (npm)
Malicious code in fcogvspgigatanzcydfyvgtjhvxibyau (npm)
Malicious code in fcogvspgigatanzcydfyvgtjhvxibyau (npm)
Malicious code in express-wrapper (npm)
Malicious code in express-wrapper (npm)
Malicious code in express.ja (npm)
Malicious code in express.ja (npm)
Malicious code in express-test-dependency (npm)
Malicious code in express-test-dependency (npm)
Malicious code in pullingpackageeee (npm)
Malicious code in pullingpackageeee (npm)
Malicious code in express-bubble (npm)
Malicious code in express-bubble (npm)
Malicious code in lodash-ex (npm)
Malicious code in lodash-ex (npm)
Malicious code in inkalabs (npm)
Malicious code in inkalabs (npm)
Malicious code in expres.js (npm)
Malicious code in expres.js (npm)
Malicious code in etwl (npm)
Malicious code in etwl (npm)
Malicious code in ethers-io-ethers (npm)
Malicious code in ethers-io-ethers (npm)
Malicious code in equiviewer (npm)
Malicious code in equiviewer (npm)
Malicious code in ember-livereload-indicator (npm)
Malicious code in ember-livereload-indicator (npm)
Malicious code in easyinstaller (npm)
Malicious code in easyinstaller (npm)
Malicious code in ember-cli-deploy-derploy (npm)
Malicious code in ember-cli-deploy-derploy (npm)
Malicious code in ethe.json (npm)
Malicious code in ethe.json (npm)
Malicious code in express.jd (npm)
Malicious code in express.jd (npm)
Malicious code in ethersss (npm)
Malicious code in ethersss (npm)
Malicious code in eth.json (npm)
Malicious code in eth.json (npm)
Malicious code in dsilva-react-module-seed (npm)
Malicious code in dsilva-react-module-seed (npm)
Malicious code in ethers-v6 (npm)
Malicious code in ethers-v6 (npm)
Malicious code in easycommons (npm)
Malicious code in easycommons (npm)
Malicious code in dotex-plugin (npm)
Malicious code in dotex-plugin (npm)
Malicious code in ekspress (npm)
Malicious code in ekspress (npm)
Malicious code in ember-cli-deploy-secrets (npm)
Malicious code in ember-cli-deploy-secrets (npm)
Malicious code in ethers.jsonn (npm)
Malicious code in ethers.jsonn (npm)
Malicious code in dotenv-core (npm)
Malicious code in dotenv-core (npm)
Malicious code in discord-starter (npm)
Malicious code in discord-starter (npm)
Malicious code in discord-rsc (npm)
Malicious code in discord-rsc (npm)
Malicious code in clo-adspect (npm)
Malicious code in clo-adspect (npm)
Malicious code in express-sequelize-wrapper (npm)
Malicious code in express-sequelize-wrapper (npm)
Malicious code in isix (npm)
Malicious code in isix (npm)
Malicious code in decline (npm)
Malicious code in decline (npm)
Malicious code in d3-bbox (npm)
Malicious code in d3-bbox (npm)
Malicious code in dwa-tridion-webapp (npm)
Malicious code in dwa-tridion-webapp (npm)
Malicious code in consumerweb-risk (npm)
Malicious code in consumerweb-risk (npm)
Malicious code in curse-dependent (npm)
Malicious code in curse-dependent (npm)
Malicious code in famshot (npm)
Malicious code in famshot (npm)
Malicious code in ethe (npm)
Malicious code in ethe (npm)
Malicious code in @sourav_chanduka/core-no-ngrok (npm)
Malicious code in @sourav_chanduka/core-no-ngrok (npm)
Malicious code in @meteora-sdk/core (npm)
Malicious code in @meteora-sdk/core (npm)
Malicious code in @dotconf-pro/dotenv (npm)
Malicious code in @dotconf-pro/dotenv (npm)
AWS Amplify Studio UI Component Properties Has an Input Validation Issue
AWS Amplify Studio UI Component Properties Has an Input Validation Issue
Malicious code in @grua/icons (npm)
Malicious code in @grua/icons (npm)
dssrf has an SSRF bypass with remove_at_symbol_in_string
dssrf has an SSRF bypass with remove_at_symbol_in_string
Malicious code in @nordea-web/ui (npm)
Malicious code in @nordea-web/ui (npm)
Malicious code in @patternfly-4/react-table (npm)
Malicious code in @patternfly-4/react-table (npm)
Malicious code in @relforce-dev/console-log (npm)
Malicious code in @relforce-dev/console-log (npm)
Malicious code in @pumpdot-fun/pump-swap-sdk (npm)
Malicious code in @pumpdot-fun/pump-swap-sdk (npm)
Malicious code in @404c3s4r/testxxx (npm)
Malicious code in @404c3s4r/testxxx (npm)
Malicious code in @santieich/homebridge-midea-lan (npm)
Malicious code in @santieich/homebridge-midea-lan (npm)
Malicious code in discord-ms (npm)
Malicious code in discord-ms (npm)
Malicious code in @grua/core (npm)
Malicious code in @grua/core (npm)
Malicious code in @dotconf-pro/dotconf-pro (npm)
Malicious code in @dotconf-pro/dotconf-pro (npm)
Malicious code in 1apijs (npm)
Malicious code in 1apijs (npm)
Malicious code in canvas-to (npm)
Malicious code in canvas-to (npm)
Malicious code in @sourav_chanduka/core (npm)
Malicious code in @sourav_chanduka/core (npm)
Malicious code in @ethers-sdk/ethers (npm)
Malicious code in @ethers-sdk/ethers (npm)
Malicious code in @ethers-sdk/wallet (npm)
Malicious code in @ethers-sdk/wallet (npm)
Malicious code in @web3utils/common (npm)
Malicious code in @web3utils/common (npm)
Malicious code in @pumpdot-fun/pump-sdk (npm)
Malicious code in @pumpdot-fun/pump-sdk (npm)
Malicious code in @patternfly-4/quickstarts (npm)
Malicious code in @patternfly-4/quickstarts (npm)
Malicious code in @node-console-log/log (npm)
Malicious code in @node-console-log/log (npm)
Malicious code in @nordea-web/core (npm)
Malicious code in @nordea-web/core (npm)
Malicious code in chalk-button (npm)
Malicious code in chalk-button (npm)
Malicious code in base58-ts (npm)
Malicious code in base58-ts (npm)
Malicious code in @solana-sdk/web3.js (npm)
Malicious code in @solana-sdk/web3.js (npm)
Malicious code in @solana-utils/common (npm)
Malicious code in @solana-utils/common (npm)
Malicious code in @patternfly-4/react-core (npm)
Malicious code in @patternfly-4/react-core (npm)
Malicious code in base-x-ts (npm)
Malicious code in base-x-ts (npm)
Malicious code in @web3-util/common (npm)
Malicious code in @web3-util/common (npm)
Malicious code in @patternfly-4/react-tokens (npm)
Malicious code in @patternfly-4/react-tokens (npm)
Malicious code in @spectraltest/loglevel (npm)
Malicious code in @spectraltest/loglevel (npm)
Malicious code in zcas (npm)
Malicious code in zcas (npm)
Malicious code in @sourav_chanduka/oidc-client (npm)
Malicious code in @sourav_chanduka/oidc-client (npm)
Malicious code in ag-grid-boost (npm)
Malicious code in ag-grid-boost (npm)
Malicious code in scol (npm)
Malicious code in scol (npm)
Malicious code in android-web-logger (npm)
Malicious code in android-web-logger (npm)
Malicious code in datdbs (npm)
Malicious code in datdbs (npm)
Malicious code in api-gateway-lambda-router (npm)
Malicious code in api-gateway-lambda-router (npm)
Malicious code in baofdadbybmqeefeeginweoamxlphrjq (npm)
Malicious code in baofdadbybmqeefeeginweoamxlphrjq (npm)
Malicious code in bn.js-5 (npm)
Malicious code in bn.js-5 (npm)
Malicious code in testsetset (npm)
Malicious code in testsetset (npm)
Malicious code in apijsclo (npm)
Malicious code in apijsclo (npm)
Malicious code in bajkvahzv8allnltvr7x4s5hdxkjvyji (npm)
Malicious code in bajkvahzv8allnltvr7x4s5hdxkjvyji (npm)
Malicious code in aven_shared (npm)
Malicious code in aven_shared (npm)
Malicious code in discord-csr (npm)
Malicious code in discord-csr (npm)
Malicious code in svelte-streak-metric (npm)
Malicious code in svelte-streak-metric (npm)
Malicious code in aruda (npm)
Malicious code in aruda (npm)
Malicious code in tsetnpmackage (npm)
Malicious code in tsetnpmackage (npm)
Malicious code in build-time-metrics (npm)
Malicious code in build-time-metrics (npm)
Malicious code in dash-merge (npm)
Malicious code in dash-merge (npm)
Malicious code in cancelling (npm)
Malicious code in cancelling (npm)
Malicious code in blbird (npm)
Malicious code in blbird (npm)
Malicious code in broccoli-watcher-siphon (npm)
Malicious code in broccoli-watcher-siphon (npm)
Malicious code in wistia_namespace (npm)
Malicious code in wistia_namespace (npm)
Malicious code in wastu (npm)
Malicious code in wastu (npm)
Malicious code in ttest3333 (npm)
Malicious code in ttest3333 (npm)
Malicious code in ttest333 (npm)
Malicious code in ttest333 (npm)
Malicious code in xp-node-logger (npm)
Malicious code in xp-node-logger (npm)
Malicious code in bn.js-4 (npm)
Malicious code in bn.js-4 (npm)
Malicious code in uniswapintefrace (npm)
Malicious code in uniswapintefrace (npm)
Malicious code in thoughtgear (npm)
Malicious code in thoughtgear (npm)
Malicious code in unified-help-center-alpha (npm)
Malicious code in unified-help-center-alpha (npm)
Malicious code in time-to-reload (npm)
Malicious code in time-to-reload (npm)
Malicious code in tailwindcssss (npm)
Malicious code in tailwindcssss (npm)
Malicious code in termly-namespace (npm)
Malicious code in termly-namespace (npm)
Malicious code in switchpaymentsapiserv-paypal (npm)
Malicious code in switchpaymentsapiserv-paypal (npm)
Malicious code in test-wastu (npm)
Malicious code in test-wastu (npm)
Malicious code in testtwix (npm)
Malicious code in testtwix (npm)
Malicious code in spectral-wraith (npm)
Malicious code in spectral-wraith (npm)
Malicious code in sunpro-3dmodel-renderer (npm)
Malicious code in sunpro-3dmodel-renderer (npm)
Malicious code in shnc (npm)
Malicious code in shnc (npm)
Malicious code in svelte-metric-map (npm)
Malicious code in svelte-metric-map (npm)
Malicious code in zer0code (npm)
Malicious code in zer0code (npm)
Malicious code in @mypwn/hawkeye (npm)
Malicious code in @mypwn/hawkeye (npm)
Malicious code in feedback-ai-sdk (npm)
Malicious code in feedback-ai-sdk (npm)
Malicious code in @peptide-unit/peptide-modify (npm)
Malicious code in @peptide-unit/peptide-modify (npm)
Malicious code in lzd-unified-station-sdk (npm)
Malicious code in lzd-unified-station-sdk (npm)
Malicious code in @peptide-unit/js-unimode (npm)
Malicious code in @peptide-unit/js-unimode (npm)
Malicious code in aone-cloud-cli (npm)
Malicious code in aone-cloud-cli (npm)
Malicious code in @bowozzz/baileys (npm)
Malicious code in @bowozzz/baileys (npm)
Malicious code in colder-cli (npm)
Malicious code in colder-cli (npm)
Malicious code in lwp-web-client (npm)
Malicious code in lwp-web-client (npm)
Malicious code in @zannstore/baileys (npm)
Malicious code in @zannstore/baileys (npm)
Malicious code in @ai-plus/de-agent (npm)
Malicious code in @ai-plus/de-agent (npm)
Malicious code in @ai-plus/de-agent-sdk (npm)
Malicious code in @ai-plus/de-agent-sdk (npm)
Malicious code in @types-beta/sdk (npm)
Malicious code in @types-beta/sdk (npm)
Malicious code in @finxsecdemo/utils (npm)
Malicious code in @finxsecdemo/utils (npm)
Malicious code in flight-compare-analyzer (npm)
Malicious code in flight-compare-analyzer (npm)
swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client template
swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client template
Malicious code in def-open-client (npm)
Malicious code in def-open-client (npm)
Malicious code in uniapi-bridge (npm)
Malicious code in uniapi-bridge (npm)
Malicious code in @ai-agent-node/nodesql (npm)
Malicious code in @ai-agent-node/nodesql (npm)
AgentCore CLI Bedrock Agent Import Vulnerable to Code Injection via Improper Triple-Quote Escaping
AgentCore CLI Bedrock Agent Import Vulnerable to Code Injection via Improper Triple-Quote Escaping
Malicious code in chain-manager (npm)
Malicious code in chain-manager (npm)
Malicious code in @ai-agent-node/createnode (npm)
Malicious code in @ai-agent-node/createnode (npm)
swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies
swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies
swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref`
swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref`
Malicious code in test2221 (npm)
Malicious code in test2221 (npm)
mathlive's Lack of Escaping of HTML allows for XSS
mathlive's Lack of Escaping of HTML allows for XSS
swagger-typescript-api vulnerable to code injection via unescaped enum string values
swagger-typescript-api vulnerable to code injection via unescaped enum string values
swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`
swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`
swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template
swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template
Malicious code in test-skill-zip (npm)
Malicious code in test-skill-zip (npm)
Malicious code in @ai-agent-node/agent-node (npm)
Malicious code in @ai-agent-node/agent-node (npm)
Malicious code in open-worker-cli (npm)
Malicious code in open-worker-cli (npm)
@dynatrace-oss/dynatrace-mcp-server's create_dynatrace_notebook missing the human-approval gate
@dynatrace-oss/dynatrace-mcp-server's create_dynatrace_notebook missing the human-approval gate
Malicious code in array-sort-helper (npm)
Malicious code in array-sort-helper (npm)
Malicious code in cloud-config-fetcher (npm)
Malicious code in cloud-config-fetcher (npm)
Malicious code in toll_free (npm)
Malicious code in toll_free (npm)
Malicious code in chain-analyze (npm)
Malicious code in chain-analyze (npm)
Malicious code in @joyfill/layouts (npm)
Malicious code in @joyfill/layouts (npm)
Malicious code in postcss-motion-utils (npm)
Malicious code in postcss-motion-utils (npm)
Malicious code in aone-kit (npm)
Malicious code in aone-kit (npm)
Malicious code in @vaultflow/update-flow (npm)
Malicious code in @vaultflow/update-flow (npm)
Malicious code in local-config-parser (npm)
Malicious code in local-config-parser (npm)
Malicious code in lib-mtop (npm)
Malicious code in lib-mtop (npm)
Malicious code in aone-sandbox (npm)
Malicious code in aone-sandbox (npm)
Malicious code in smart-config-manager (npm)
Malicious code in smart-config-manager (npm)
Malicious code in blots (npm)
Malicious code in blots (npm)
Malicious code in @vaultflow/create-flow (npm)
Malicious code in @vaultflow/create-flow (npm)
@hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution
@hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution
Malicious code in string-format-kit (npm)
Malicious code in string-format-kit (npm)
Malicious code in @joyfill/components (npm)
Malicious code in @joyfill/components (npm)
Malicious code in fluid-type-ui (npm)
Malicious code in fluid-type-ui (npm)
Malicious code in aone-kit-cli (npm)
Malicious code in aone-kit-cli (npm)
Malicious code in num-format-helper (npm)
Malicious code in num-format-helper (npm)
Malicious code in json-to-table-util (npm)
Malicious code in json-to-table-util (npm)
Malicious code in edu-npm-helper-beta (npm)
Malicious code in edu-npm-helper-beta (npm)
Malicious code in @thone33/react-helpers (npm)
Malicious code in @thone33/react-helpers (npm)
Malicious code in fazzgram (npm)
Malicious code in fazzgram (npm)
Malicious code in edu-npm-helper-alpha (npm)
Malicious code in edu-npm-helper-alpha (npm)
Malicious code in identityauthorizationserv (npm)
Malicious code in identityauthorizationserv (npm)
Malicious code in amanexzyra-baileys (npm)
Malicious code in amanexzyra-baileys (npm)
Malicious code in @fazzcode/baileys (npm)
Malicious code in @fazzcode/baileys (npm)
Malicious code in @heartlandone-private/fontawesome-pro (npm)
Malicious code in @heartlandone-private/fontawesome-pro (npm)
Malicious code in xo-twofa (npm)
Malicious code in xo-twofa (npm)
Malicious code in @vinnxcode/xbailsync (npm)
Malicious code in @vinnxcode/xbailsync (npm)
Malicious code in kalipto-runtime (npm)
Malicious code in kalipto-runtime (npm)
Malicious code in demo-awesome-date-parser-test (npm)
Malicious code in demo-awesome-date-parser-test (npm)
Malicious code in @array-util/subsearch (npm)
Malicious code in @array-util/subsearch (npm)
Tooling for npm
Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.