Skip to content
OpenAdvisories

Package · npm

@cap-js/openapi

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.6
    GHSA-jpvj-wpmj-h7rv

    Supply chain compromise via malicious @cap-js/openapi

    ### Impact On May 19, 2026, a compromised version of @cap-js/openapi@1.4.1 was published. The malicious packages harvested credentials and attempted self-propagation. If a compromised version was installed, all credentials accessible on that machine (npm toke…

    @cap-js/openapi npm