Shai-Hulud v3.0 - The Golden Path Node Package Manager (NPM) worm is a self-replicating malware that infiltrates the NPM supply chain, stealing cre...

hemmelig allows SSRF Filter bypass via Secret Request functionality

Malicious code in kcheck (npm)

Malicious code in intl-tel-input-utils (npm)

Malicious code in crypto-trade-analyzer (npm)

Malicious code in eslint-config-pexip-engage (npm)

Malicious code in api-umbrella-admin-ui (npm)

Malicious code in eslint-config-sdk (npm)

Malicious code in ugc-kit (npm)

Malicious code in ing-feat-malware-detection (npm)

Malicious code in ing-feat-ui-image (npm)

Malicious code in backstage-plugin-glean (npm)

apidoc-core has a prototype pollution vulnerability

Self-hosted n8n has Legacy Code node that enables arbitrary file read/write

n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node

n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe Sandbox

libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)

Malicious code in bola511 (npm)

Malicious code in magic-poc (npm)

Malicious code in bettermode-icons (npm)