Skip to content
OpenAdvisories

Package · npm

commander-js

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    GHSA-2hqf-qqmq-pgpp

    Malicious Package in commander-js

    All versions of `commander-js` are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads an arbitrary file and executes its contents…

    commander-js npm