npm - OSV

MAL-2026-14268

npm/no-for-of-loops

Malicious code in no-for-of-loops (npm) 19 Aug

No fix available

MAL-2026-14138

npm/optimizely-starter-kit-for-fastly-compute

Malicious code in optimizely-starter-kit-for-fastly-compute (npm) 18 Aug

No fix available

MAL-2026-10889

npm/@public-for-cdao/utils

Malicious code in @public-for-cdao/utils (npm) 20 Jul

No fix available

MAL-2026-10888

npm/@public-for-cdao/signer

Malicious code in @public-for-cdao/signer (npm) 20 Jul

No fix available

MAL-2026-10886

npm/@public-for-cdao/deploy

Malicious code in @public-for-cdao/deploy (npm) 20 Jul

No fix available

MAL-2026-10887

npm/@public-for-cdao/sdk

Malicious code in @public-for-cdao/sdk (npm) 20 Jul

No fix available

MAL-2026-10885

npm/@public-for-cdao/core

Malicious code in @public-for-cdao/core (npm) 20 Jul

No fix available

MAL-2026-10884

npm/@public-for-cdao/contracts

Malicious code in @public-for-cdao/contracts (npm) 20 Jul

No fix available

MAL-2026-10883

npm/@public-for-cdao/bot

Malicious code in @public-for-cdao/bot (npm) 20 Jul

No fix available

MAL-2026-10882

npm/@public-for-cdao/backend

Malicious code in @public-for-cdao/backend (npm) 20 Jul

No fix available

GHSA-g4w6-vmgf-xqvx

npm/@cedar-policy/authorization-for-expressjs

@cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation 30 Jun

Fix available
Severity - 8.8 (High)

MAL-2026-5971

npm/@public-for-cdao/hooks

Malicious code in @public-for-cdao/hooks (npm) 17 Jun

No fix available

MAL-2026-10599

npm/@public-for-cdao/abi

Malicious code in @public-for-cdao/abi (npm) 17 Jun

No fix available

MAL-2026-10600

npm/@public-for-cdao/api

Malicious code in @public-for-cdao/api (npm) 17 Jun

No fix available

MAL-2026-10603

npm/@public-for-cdao/token

Malicious code in @public-for-cdao/token (npm) 17 Jun

No fix available

MAL-2026-10601

npm/@public-for-cdao/common

Malicious code in @public-for-cdao/common (npm) 17 Jun

No fix available

Vulnerabilities