Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-10652
  • npm/json-bigint-extend
Malicious code in json-bigint-extend (npm) 14 Jul
  • No fix available
MAL-2026-10420
  • npm/path-addon-extend
Malicious code in path-addon-extend (npm) 13 Jul
  • No fix available
MAL-2026-4592
  • npm/jsontoken-extend
Malicious code in jsontoken-extend (npm) 25 May
  • No fix available
MAL-2026-2920
  • npm/buffer-util-extend
Malicious code in buffer-util-extend (npm) 14 Apr
  • No fix available
MAL-2026-2929
  • npm/path-extend
Malicious code in path-extend (npm) 14 Apr
  • No fix available
MAL-2026-2363
  • npm/env-extend
Malicious code in env-extend (npm) 24 Mar
  • No fix available
MAL-2025-192743
  • npm/dotenv-extend
Malicious code in dotenv-extend (npm) 23 Dec 2025
  • No fix available
MAL-2025-192825
  • npm/no-use-extend-native
Malicious code in no-use-extend-native (npm) 23 Dec 2025
  • No fix available
MAL-2025-6968
  • npm/vite-plugin-vue-extend-plugin
Malicious code in vite-plugin-vue-extend-plugin (npm) 17 Aug 2025
  • No fix available
MAL-2025-20087
  • npm/express-uatraits-extend
Malicious code in express-uatraits-extend (npm) 14 Aug 2025
  • No fix available
MAL-2025-38651
  • npm/vscode-extend
Malicious code in vscode-extend (npm) 14 Aug 2025
  • No fix available
GHSA-7qgg-vw88-cc99
  • npm/utils-extend
utils-extend Prototype Pollution 06 Feb 2025
  • No fix available
  • Severity - 9.1 (Critical)
GHSA-m639-9whg-fw97
  • npm/object-extend
Prototype Pollution in object-extend 19 Feb 2022
  • No fix available
  • Severity - 9.8 (Critical)
GHSA-mh82-55cm-6gfh
  • npm/js-extend
Prototype pollution vulnerability in js-extend 08 Jun 2021
  • No fix available
  • Severity - 9.8 (Critical)
GHSA-cg42-4wrc-gp47
  • npm/node-extend
Code Injection in node-extend 17 May 2021
  • No fix available
  • Severity - 9.8 (Critical)
GHSA-6pq3-928q-x6w6
  • npm/utils-extend
Prototype Pollution 03 Sep 2020
  • No fix available