Affected packages
- px8my
Exploit signal
- Known exploited (CISA KEV)
- No
- EPSS score
- —
- EPSS percentile
- —
EPSS is the probability a CVE is exploited in the wild; percentile is its rank among all CVEs.
Sources
- https://www.npmjs.com/package/px8my/v/1.0.32
- https://www.npmjs.com/package/px8my/v/1.0.23
- https://www.npmjs.com/package/px8my/v/1.0.13
- https://www.npmjs.com/package/px8my/v/1.0.35
- https://www.npmjs.com/package/px8my/v/1.0.22
- https://www.npmjs.com/package/px8my/v/1.0.36
- https://github.com/advisories/GHSA-9869-r2r5-fff6
- https://www.npmjs.com/package/px8my/v/1.0.48
- https://www.npmjs.com/package/px8my/v/1.0.47
- https://www.npmjs.com/package/px8my/v/1.0.45
- https://www.npmjs.com/package/px8my/v/1.0.44
- https://www.npmjs.com/package/px8my/v/1.0.31
- https://www.npmjs.com/package/px8my/v/1.0.25
- https://www.npmjs.com/package/px8my/v/1.0.30
- https://www.npmjs.com/package/px8my/v/1.0.38
- https://www.npmjs.com/package/px8my/v/1.0.43
- https://www.npmjs.com/package/px8my/v/1.0.37
- https://www.npmjs.com/package/px8my/v/1.0.26
- https://www.npmjs.com/package/px8my/v/1.0.39
- https://www.npmjs.com/package/px8my/v/1.0.27
- https://www.npmjs.com/package/px8my/v/1.0.34
- https://www.npmjs.com/package/px8my/v/1.0.50
- https://www.npmjs.com/package/px8my/v/1.0.33
- https://www.npmjs.com/package/px8my/v/1.0.40
- https://www.npmjs.com/package/px8my/v/1.0.46
- https://www.npmjs.com/package/px8my/v/1.0.52
- https://www.npmjs.com/package/px8my/v/1.0.29
- https://www.npmjs.com/package/px8my/v/1.0.53
- https://www.npmjs.com/package/px8my/v/1.0.54
- https://www.npmjs.com/package/px8my/v/1.0.28
- https://www.npmjs.com/package/px8my/v/1.0.49
- https://www.npmjs.com/package/px8my/v/1.0.24
- https://www.npmjs.com/package/px8my/v/1.0.42
- https://www.npmjs.com/package/px8my/v/1.0.51
- https://www.npmjs.com/package/px8my/v/1.0.41
Structured record: https://osv.dev/vulnerability/MAL-2026-10104
Recommended response stack
Snyk — Scan your dependencies in CI and fix this vulnerability.→Socket — Detect malicious and compromised packages before they ship.→
Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.
Get incidents like this as alerts for your stack.
Join the beta