npm - OSV

MAL-2026-17166

npm/cache-swipper

Malicious code in cache-swipper (npm) 24 Sep

No fix available

GHSA-ch52-4w7c-c8xp

npm/http-cache-semantics

http-cache-semantics max-stale handling can disclose cross-user cached responses 18 Sep

No fix available
Severity - 8.7 (High)

MAL-2026-16078

npm/cache-cleanup-module

Malicious code in cache-cleanup-module (npm) 09 Sep

No fix available

MAL-2026-15875

npm/btree-lru-cache

Malicious code in btree-lru-cache (npm) 03 Sep

No fix available

MAL-2026-13677

npm/svelte-kit-cache

Malicious code in svelte-kit-cache (npm) 08 Aug

No fix available

MAL-2026-13676

npm/svelte-cache-kit

Malicious code in svelte-cache-kit (npm) 07 Aug

No fix available

GHSA-vp3h-ghgh-jr7g

npm/@nx/azure-cache
npm/@nx/gcs-cache
npm/@nx/powerpack-azure-cache
npm/@nx/powerpack-gcs-cache
npm/@nx/powerpack-s3-cache
... 4 more

Nx: Zip-Slip in the self-hosted remote cache 06 Aug

Fix available
Severity - 8.7 (High)

MAL-2026-13459

npm/streak-map-cache

Malicious code in streak-map-cache (npm) 06 Aug

No fix available

MAL-2026-13403

npm/streak-cache-map

Malicious code in streak-cache-map (npm) 06 Aug

No fix available

MAL-2026-12403

npm/node-cache-multithread

Malicious code in node-cache-multithread (npm) 05 Aug

No fix available

MAL-2026-12150

npm/bigops-auth-cache

Malicious code in bigops-auth-cache (npm) 05 Aug

No fix available

MAL-2026-12076

npm/tinkoff-cache-path

Malicious code in tinkoff-cache-path (npm) 05 Aug

No fix available

MAL-2026-11970

npm/file-entry-cache

Malicious code in file-entry-cache (npm) 04 Aug

No fix available

MAL-2026-11560

npm/@cacheable/node-cache

Malicious code in @cacheable/node-cache (npm) 04 Aug

No fix available

MAL-2026-11523

npm/cache-manager

Malicious code in cache-manager (npm) 04 Aug

No fix available

MAL-2026-11971

npm/flat-cache

Malicious code in flat-cache (npm) 04 Aug

No fix available

Vulnerabilities