Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-12475
  • npm/tcb-web-copy-to-clipboard
Malicious code in tcb-web-copy-to-clipboard (npm) 05 Aug
  • No fix available
MAL-2026-4213
  • npm/polymarket-copy-trading
Malicious code in polymarket-copy-trading (npm) 21 May
  • No fix available
MAL-2026-1666
  • npm/carbon-mac-copy-cloner
Malicious code in carbon-mac-copy-cloner (npm) 18 Mar
  • No fix available
GHSA-pp7p-q8fx-2968
  • npm/vite-plugin-static-copy
vite-plugin-static-copy files not included in `src` are possible to access with a crafted request 21 Aug 2025
  • Fix available
  • Severity - 6.0 (Medium)
MAL-2025-20952
  • npm/freerte-copy-plugin
Malicious code in freerte-copy-plugin (npm) 14 Aug 2025
  • No fix available
MAL-2025-6354
  • npm/@platform-ui-storybook/copy-button
Malicious code in @platform-ui-storybook/copy-button (npm) 30 Jul 2025
  • No fix available
MAL-2025-4736
  • npm/copy-package-contents
Malicious code in copy-package-contents (npm) 04 Jun 2025
  • No fix available
MAL-2025-860
  • npm/postject-copy
Malicious code in postject-copy (npm) 03 Feb 2025
  • No fix available
MAL-2024-7751
  • npm/img-aws-s3-object-multipart-copy
Malicious code in img-aws-s3-object-multipart-copy (npm) 15 Jul 2024
  • No fix available
MAL-2023-52
  • npm/@playgami/portal-dynamic-copy
Malicious code in @playgami/portal-dynamic-copy (npm) 09 Jan 2023
  • No fix available
GHSA-p5g9-rjcf-95vj
  • npm/fastest-json-copy
fastest-json-copy vulnerable to Prototype Pollution 04 Nov 2022
  • No fix available
  • Severity - 5.3 (Medium)
GHSA-897m-rjf5-jp39
  • npm/copy-props
Prototype Pollution in copy-props 06 Jan 2022
  • Fix available
  • Severity - 7.3 (High)