npm - OSV

MAL-2026-17184

npm/@airbnb-extended/typescript-config

Malicious code in @airbnb-extended/typescript-config (npm) 25 Sep

No fix available

MAL-2026-11753

npm/@ornikar/eslint-config-typescript-react

Malicious code in @ornikar/eslint-config-typescript-react (npm) 04 Aug

No fix available

MAL-2026-11981

npm/pob-test-typescript-package-in-monorepo

Malicious code in pob-test-typescript-package-in-monorepo (npm) 04 Aug

No fix available

MAL-2026-11751

npm/@ornikar/eslint-config-typescript

Malicious code in @ornikar/eslint-config-typescript (npm) 04 Aug

No fix available

MAL-2026-11752

npm/@ornikar/eslint-config-typescript-nestjs

Malicious code in @ornikar/eslint-config-typescript-nestjs (npm) 04 Aug

No fix available

GHSA-w284-33mx-6g9v

npm/swagger-typescript-api

swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies 29 Jul

Fix available
Severity - 8.3 (High)

GHSA-5f94-x226-ccpm

npm/swagger-typescript-api

swagger-typescript-api vulnerable to code injection via unescaped enum string values 29 Jul

Fix available
Severity - 8.3 (High)

GHSA-38c3-wv3c-v3xj

npm/swagger-typescript-api

swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client template 29 Jul

Fix available
Severity - 8.3 (High)

GHSA-x36r-4347-pm5x

npm/swagger-typescript-api

swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref` 29 Jul

Fix available
Severity - 6.1 (Medium)

GHSA-hqj5-cw9f-rx67

npm/swagger-typescript-api

swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template 29 Jul

Fix available
Severity - 8.3 (High)

GHSA-h754-fxp7-88wx

npm/swagger-typescript-api

swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref` 29 Jul

Fix available
Severity - 7.4 (High)

MAL-2026-10704

npm/@across-toolkit/typescript-config

Malicious code in @across-toolkit/typescript-config (npm) 16 Jul

No fix available

MAL-2026-6925

npm/typescript-base58

Malicious code in typescript-base58 (npm) 07 Jul

No fix available

MAL-2026-7092

npm/@spinstorm/typescript-config

Malicious code in @spinstorm/typescript-config (npm) 07 Jul

No fix available

MAL-2026-6746

npm/typescript-util-core

Malicious code in typescript-util-core (npm) 03 Jul

No fix available

MAL-2026-5470

npm/getd-typescript-eslint-rules

Malicious code in getd-typescript-eslint-rules (npm) 09 Jun

No fix available

Vulnerabilities