OSV - Open Source Vulnerabilities

MAL-2025-6005

npm/noya-vaults

Malicious code in noya-vaults (npm)

6 hours ago

No fix available

MAL-2025-5998

npm/eth-validator

Malicious code in eth-validator (npm)

11 hours ago

No fix available

MAL-2025-6003

npm/sol-validator

Malicious code in sol-validator (npm)

11 hours ago

No fix available

MAL-2025-5999

npm/nodemailer-helper

Malicious code in nodemailer-helper (npm)

11 hours ago

No fix available

MAL-2025-6001

npm/react-hook-form-ui

Malicious code in react-hook-form-ui (npm)

11 hours ago

No fix available

MAL-2025-6004

npm/winston-compose

Malicious code in winston-compose (npm)

11 hours ago

No fix available

MAL-2025-6002

npm/rtp-rapyd

Malicious code in rtp-rapyd (npm)

11 hours ago

No fix available

MAL-2025-5997

npm/dex-sample-app

Malicious code in dex-sample-app (npm)

11 hours ago

No fix available

MAL-2025-6000

npm/public-tools-and-demos

Malicious code in public-tools-and-demos (npm)

11 hours ago

No fix available

GHSA-9rcw-c2f9-2j55

npm/@openzeppelin/contracts
npm/@openzeppelin/contracts-upgradeable

OpenZeppelin Contracts Bytes's lastIndexOf function with position argument performs out-of-bound memory access on empty buffers

13 hours ago

Fix available
Severity - 6.9 (Medium)

GHSA-76c9-3jph-rj3q

npm/on-headers

on-headers is vulnerable to http response header manipulation

13 hours ago

Fix available
Severity - 3.4 (Low)

GHSA-fjgf-rc76-4x9p

npm/multer

Multer vulnerable to Denial of Service via unhandled exception from malformed request

13 hours ago

Fix available
Severity - 7.5 (High)

MAL-2025-5996

npm/@jssrv/template

Malicious code in @jssrv/template (npm)

14 hours ago

No fix available

GHSA-hfj7-542q-8fvv

npm/@dirac-grid/diracx-web-components

DiracX-Web is vulnerable to attack through an Open Redirect on its login page

15 hours ago

Fix available
Severity - 4.7 (Medium)

MAL-2025-5995

npm/dascxcxcxcxcxcxxc

Malicious code in dascxcxcxcxcxcxxc (npm)

18 hours ago

No fix available

MAL-2025-5994

npm/acsascasccsaascascacs

Malicious code in acsascasccsaascascacs (npm)

19 hours ago

No fix available