OSV - Open Source Vulnerabilities

MAL-2025-6231

npm/bufbuild-core

Malicious code in bufbuild-core (npm)

51 minutes ago

No fix available

MAL-2025-6232

npm/plugin-basic-ssl

Malicious code in plugin-basic-ssl (npm)

1 hour ago

No fix available

MAL-2025-6230

npm/airbnb-private

Malicious code in airbnb-private (npm)

5 hours ago

No fix available

MAL-2025-6229

npm/airbnb-prop

Malicious code in airbnb-prop (npm)

6 hours ago

No fix available

MAL-2025-6228

npm/kalitestbbh

Malicious code in kalitestbbh (npm)

7 hours ago

No fix available

MAL-2025-6226

npm/react-dom-builtin

Malicious code in react-dom-builtin (npm)

9 hours ago

No fix available

MAL-2025-6227

npm/react-is-builtin

Malicious code in react-is-builtin (npm)

9 hours ago

No fix available

MAL-2025-6224

npm/google-protobuf-conformance

Malicious code in google-protobuf-conformance (npm)

9 hours ago

No fix available

MAL-2025-6225

npm/xk6-top

Malicious code in xk6-top (npm)

9 hours ago

No fix available

MAL-2025-6223

npm/hackerone-internal

Malicious code in hackerone-internal (npm)

11 hours ago

No fix available

MAL-2025-6221

npm/creditorwatch

Malicious code in creditorwatch (npm)

19 hours ago

No fix available

MAL-2025-6222

npm/ids-core

Malicious code in ids-core (npm)

19 hours ago

No fix available

GHSA-3r3j-4vrw-884j

npm/files-bucket-server

files-bucket-server vulnerable to Directory Traversal

yesterday

No fix available
Severity - 7.7 (High)

GHSA-4j66-8f4r-3pjx

npm/bun

bun vulnerable to OS Command Injection

yesterday

No fix available
Severity - 7.4 (High)

GHSA-9h3q-32c7-r533

npm/private-ip

private-ip vulnerable to Server-Side Request Forgery

yesterday

No fix available
Severity - 7.8 (High)

MAL-2025-6215

npm/bingo-abstract-transport

Malicious code in bingo-abstract-transport (npm)

yesterday

No fix available