Affected packages
- @onescience/onecode
Exploit signal
- Known exploited (CISA KEV)
- No
- EPSS score
- —
- EPSS percentile
- —
EPSS is the probability a CVE is exploited in the wild; percentile is its rank among all CVEs.
Sources
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607161038
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607161710
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607161139
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607231111
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202608041043
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607171833
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202608041614
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607270920
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607271545
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607281814
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202608031812
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607271808
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607281613
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607291705
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607301758
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607200911
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607231354
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607221649
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202608061753
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607281527
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607311732
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607281758
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607311756
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607171841
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607301600
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607310907
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202608010827
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202608041653
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607291116
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607240916
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607230908
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607201741
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607161642
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202608041828
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202608041416
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607281737
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202608051418
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607231515
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607220956
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607271456
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202608031514
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607311449
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607291417
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607281928
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607231344
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607281838
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202608061459
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202608041802
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202608051826
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202608041724
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202607291013
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202608071618
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202608071143
- https://www.npmjs.com/package/@onescience/onecode/v/1.14.50-202608070922
Structured record: https://osv.dev/vulnerability/MAL-2026-10717
Recommended response stack
Snyk — Scan your dependencies in CI and fix this vulnerability.→Socket — Detect malicious and compromised packages before they ship.→
Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.
Get incidents like this as alerts for your stack.
Join the beta