OSV - Open Source Vulnerabilities

MAL-2025-190940

npm/url-encode-decode

Malicious code in url-encode-decode (npm)

24 Nov

No fix available

MAL-2025-190897

npm/@posthog/url-normalizer-plugin

Malicious code in @posthog/url-normalizer-plugin (npm)

24 Nov

No fix available

MAL-2025-49155

npm/epic-gtm-url-checker

Malicious code in epic-gtm-url-checker (npm)

30 Oct

No fix available

MAL-2025-47310

npm/ember-url-hash-polyfill

Malicious code in ember-url-hash-polyfill (npm)

16 Sep

No fix available

MAL-2025-41252

npm/@navify-platform/url

Malicious code in @navify-platform/url (npm)

20 Aug

No fix available

MAL-2025-14821

npm/argos-findability-url-builder

Malicious code in argos-findability-url-builder (npm)

14 Aug

No fix available

MAL-2025-15753

npm/bitcoin-url

Malicious code in bitcoin-url (npm)

14 Aug

No fix available

MAL-2025-17181

npm/cloudinary-url-builder

Malicious code in cloudinary-url-builder (npm)

14 Aug

No fix available

MAL-2025-19564

npm/ember-normalize-url-shim

Malicious code in ember-normalize-url-shim (npm)

14 Aug

No fix available

MAL-2025-27661

npm/node-unified-login-url

Malicious code in node-unified-login-url (npm)

14 Aug

No fix available

MAL-2025-29381

npm/play-url

Malicious code in play-url (npm)

14 Aug

No fix available

MAL-2025-29546

npm/postcss-url-inline-base64

Malicious code in postcss-url-inline-base64 (npm)

14 Aug

No fix available

MAL-2025-34126

npm/stylelint-function-url-no-domain

Malicious code in stylelint-function-url-no-domain (npm)

14 Aug

No fix available

MAL-2025-36977

npm/title-from-url

Malicious code in title-from-url (npm)

14 Aug

No fix available

MAL-2025-37946

npm/url-bar-notification-button

Malicious code in url-bar-notification-button (npm)

14 Aug

No fix available

MAL-2025-37947

npm/url.resolve

Malicious code in url.resolve (npm)

14 Aug

No fix available