npm - OSV

MAL-2026-14434

npm/openai-pr-reviewer

Malicious code in openai-pr-reviewer (npm) 24 Aug

No fix available

MAL-2026-10363

npm/openai-apps

Malicious code in openai-apps (npm) 13 Jul

No fix available

MAL-2026-6582

npm/openai-agents-helpers

Malicious code in openai-agents-helpers (npm) 29 Jun

No fix available

MAL-2026-6048

npm/@mastra/voice-openai

Malicious code in @mastra/voice-openai (npm) 17 Jun

No fix available

MAL-2026-6049

npm/@mastra/voice-openai-realtime

Malicious code in @mastra/voice-openai-realtime (npm) 17 Jun

No fix available

GHSA-xrxf-jgv3-qmrm

npm/@openai/codex

OpenAI Codex CLI enables code execution through malicious MCP (Model Context Protocol) configuration files 14 Apr

No fix available
Severity - 9.8 (Critical)

MAL-2025-191363

npm/@voiceflow/openai

Malicious code in @voiceflow/openai (npm) 25 Nov 2025

No fix available

MAL-2025-47702

npm/openai-airline-agentsdk-demo-3w

Malicious code in openai-airline-agentsdk-demo-3w (npm) 26 Sep 2025

No fix available

GHSA-w5fx-fh39-j5rw

npm/@openai/codex

Codex has sandbox bypass due to bug in path configuration logic 19 Sep 2025

Fix available
Severity - 8.6 (High)

MAL-2025-46308

npm/text-openai-embedding-js

Malicious code in text-openai-embedding-js (npm) 05 Sep 2025

No fix available

MAL-2025-28317

npm/openai-realtime-console-plugin

Malicious code in openai-realtime-console-plugin (npm) 14 Aug 2025

No fix available

MAL-2025-6384

npm/openai-tsp

Malicious code in openai-tsp (npm) 30 Jul 2025

No fix available

MAL-2025-6298

npm/openai-fm

Malicious code in openai-fm (npm) 23 Jul 2025

No fix available

MAL-2025-6114

npm/openai-voice-agent-sdk-sample

Malicious code in openai-voice-agent-sdk-sample (npm) 12 Jul 2025

No fix available

MAL-2025-3519

npm/@reserach_org_jfhalsdhfkslsfds/openai-client-gadfjgfsf

Malicious code in @reserach_org_jfhalsdhfkslsfds/openai-client-gadfjgfsf (npm) 29 Apr 2025

No fix available

MAL-2025-3520

npm/@reserach_org_jfhalsdhfkslsfds/openai-server-skfghdg

Malicious code in @reserach_org_jfhalsdhfkslsfds/openai-server-skfghdg (npm) 29 Apr 2025

No fix available

Vulnerabilities