Skip to content
OpenAdvisories

Package · npm

@lightdash/cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.6
    GHSA-3hfp-gqgh-xc5g

    Axios supply chain attack - dependency in @lightdash/cli may resolve to compromised axios versions

    ### Impact A supply chain attack on the `axios` npm package (versions 1.14.1 and 0.30.4) introduced a malicious transitive dependency (`plain-crypto-js@4.2.1`) that deploys a cross-platform remote access trojan (RAT) on macOS, Windows, and Linux. The attacker…

    @lightdash/cli npm