OSV - Open Source Vulnerabilities

MAL-2026-6160

npm/firebase-readability

Malicious code in firebase-readability (npm)

17 Jun

No fix available

MAL-2025-191413

npm/ra-auth-firebase

Malicious code in ra-auth-firebase (npm)

25 Nov 2025

No fix available

MAL-2025-190864

npm/ra-data-firebase

Malicious code in ra-data-firebase (npm)

24 Nov 2025

No fix available

MAL-2025-185447

npm/altair-genomics-firebase-janus

Malicious code in altair-genomics-firebase-janus (npm)

13 Nov 2025

No fix available

MAL-2025-185600

npm/astroinformatics-brane-firebase-socketio

Malicious code in astroinformatics-brane-firebase-socketio (npm)

13 Nov 2025

No fix available

MAL-2025-185788

npm/betelgeuse-cassini-lyra-firebase

Malicious code in betelgeuse-cassini-lyra-firebase (npm)

13 Nov 2025

No fix available

MAL-2025-185990

npm/callisto-hyperion-norma-firebase

Malicious code in callisto-hyperion-norma-firebase (npm)

13 Nov 2025

No fix available

MAL-2025-186006

npm/carpo-hermes-firebase-nightmare

Malicious code in carpo-hermes-firebase-nightmare (npm)

13 Nov 2025

No fix available

MAL-2025-186168

npm/cli-module-publish-firebase

Malicious code in cli-module-publish-firebase (npm)

13 Nov 2025

No fix available

MAL-2025-186419

npm/css-minimizer-webpack-plugin-firebase-corvus-supernova

Malicious code in css-minimizer-webpack-plugin-firebase-corvus-supernova (npm)

13 Nov 2025

No fix available

MAL-2025-186481

npm/darkenergy-janus-firebase-chalk

Malicious code in darkenergy-janus-firebase-chalk (npm)

13 Nov 2025

No fix available

MAL-2025-186734

npm/enceladus-module-firebase-quantum

Malicious code in enceladus-module-firebase-quantum (npm)

13 Nov 2025

No fix available

MAL-2025-186831

npm/eslint-commitizen-firebase-upgrade

Malicious code in eslint-commitizen-firebase-upgrade (npm)

13 Nov 2025

No fix available

MAL-2025-186987

npm/firebase-antd-lyra-version

Malicious code in firebase-antd-lyra-version (npm)

13 Nov 2025

No fix available

MAL-2025-186988

npm/firebase-command-ursa-websockets

Malicious code in firebase-command-ursa-websockets (npm)

13 Nov 2025

No fix available

MAL-2025-186989

npm/firebase-ganymede-registry-async

Malicious code in firebase-ganymede-registry-async (npm)

13 Nov 2025

No fix available