npm - OSV

GHSA-hhvr-8m24-qqr3

npm/@apostrophecms/passport-bridge
npm/apostrophe

ApostropheCMS: Cross-domain session token in URL confers session takeover yesterday

Fix available
Severity - 5.3 (Medium)

MAL-2026-13627

npm/@nestjs-passport/jwt

Malicious code in @nestjs-passport/jwt (npm) 07 Aug

No fix available

MAL-2026-230

npm/passport-google-auth-token

Malicious code in passport-google-auth-token (npm) 12 Jan

No fix available

MAL-2025-191035

npm/@ntnx/passport-wso2

Malicious code in @ntnx/passport-wso2 (npm) 24 Nov 2025

No fix available

MAL-2025-190633

npm/token-verify-passport

Malicious code in token-verify-passport (npm) 24 Nov 2025

No fix available

MAL-2025-185604

npm/astrometry-passport-less-filament

Malicious code in astrometry-passport-less-filament (npm) 13 Nov 2025

No fix available

MAL-2025-186528

npm/delphinus-passport-blazar-css-minimizer-webpack-plugin

Malicious code in delphinus-passport-blazar-css-minimizer-webpack-plugin (npm) 13 Nov 2025

No fix available

MAL-2025-186774

npm/envconfig-passport-charon-hermes

Malicious code in envconfig-passport-charon-hermes (npm) 13 Nov 2025

No fix available

MAL-2025-186799

npm/equinox-passport-janus-websockets

Malicious code in equinox-passport-janus-websockets (npm) 13 Nov 2025

No fix available

MAL-2025-186804

npm/eridanus-buffer-colors-passport

Malicious code in eridanus-buffer-colors-passport (npm) 13 Nov 2025

No fix available

MAL-2025-187386

npm/hugo-nashira-boson-passport

Malicious code in hugo-nashira-boson-passport (npm) 13 Nov 2025

No fix available

MAL-2025-187552

npm/isostasy-meteor-passport-npm

Malicious code in isostasy-meteor-passport-npm (npm) 13 Nov 2025

No fix available

MAL-2025-187902

npm/magellan-gammarayburst-passport-antares

Malicious code in magellan-gammarayburst-passport-antares (npm) 13 Nov 2025

No fix available

MAL-2025-187977

npm/membrane-genomics-passport-pulsar

Malicious code in membrane-genomics-passport-pulsar (npm) 13 Nov 2025

No fix available

MAL-2025-188573

npm/passport-auth0-levels-biomimicry

Malicious code in passport-auth0-levels-biomimicry (npm) 13 Nov 2025

No fix available

MAL-2025-188574

npm/passport-coronalmassejection-vulcan-loop

Malicious code in passport-coronalmassejection-vulcan-loop (npm) 13 Nov 2025

No fix available

Vulnerabilities