Skip to content
OpenAdvisories

Package · npm

color-convert

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2025-59162

    color-convert@3.1.1 contains malware after npm account takeover

    color-convert provides plain color conversion functions in JavaScript. On 8 September 2025, the npm publishing account for color-convert was taken over after a phishing attack. Version 3.1.1 was published, functionally identical to the previous patch version,…

    Qix- color-convert color-convert npm