OSV - Open Source Vulnerabilities

GHSA-55q2-fjhq-7xh7

npm/dompurify

DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS

50 minutes ago

Fix available
Severity - 5.1 (Medium)

MAL-2026-13613

npm/big-tss

Malicious code in big-tss (npm)

1 hour ago

No fix available

MAL-2026-13611

npm/mangomind-agent

Malicious code in mangomind-agent (npm)

2 hours ago

No fix available

MAL-2026-13612

npm/transform-es2015-unicode-regex

Malicious code in transform-es2015-unicode-regex (npm)

2 hours ago

No fix available

MAL-2026-13610

npm/f-termx

Malicious code in f-termx (npm)

2 hours ago

No fix available

MAL-2026-13609

npm/hardhat-set

Malicious code in hardhat-set (npm)

3 hours ago

No fix available

MAL-2026-13608

npm/@vertexa/prisma-fetch-engine

Malicious code in @vertexa/prisma-fetch-engine (npm)

3 hours ago

No fix available

MAL-2026-13605

npm/yakuza0

Malicious code in yakuza0 (npm)

3 hours ago

No fix available

MAL-2026-13520

npm/@aster110/cc2wechat

Malicious code in @aster110/cc2wechat (npm)

3 hours ago

No fix available

MAL-2026-13549

npm/dojo-rn-interview

Malicious code in dojo-rn-interview (npm)

3 hours ago

No fix available

MAL-2026-13522

npm/base-ui-cli

Malicious code in base-ui-cli (npm)

3 hours ago

No fix available

MAL-2026-13539

npm/delivery-ci-codeceptjs

Malicious code in delivery-ci-codeceptjs (npm)

3 hours ago

No fix available

MAL-2026-13574

npm/dolyame-ui-inputautocomplete

Malicious code in dolyame-ui-inputautocomplete (npm)

3 hours ago

No fix available

MAL-2026-13547

npm/devplatform-spa-plugin-remote-module

Malicious code in devplatform-spa-plugin-remote-module (npm)

3 hours ago

No fix available

MAL-2026-13557

npm/dolyame-ui-checkablegroup

Malicious code in dolyame-ui-checkablegroup (npm)

3 hours ago

No fix available

MAL-2026-13577

npm/dolyame-ui-inputdate

Malicious code in dolyame-ui-inputdate (npm)

3 hours ago

No fix available