Skip to content
OpenAdvisories

Ecosystem

npm

7,727 known vulnerabilities.

Most affected packages

openclaw 589 n8n 156 parse-server 117 flowise 114 electron 79 vm2 78 next 77 ghost 62 directus 58 hono 57 axios 55 undici 55 nocodb 54 @budibase/server 42 apostrophe 35 node-forge 35 dompurify 33 pnpm 32 flowise-components 31 astro 31 @anthropic-ai/claude-code 30 vite 29 payload 29 nodemailer 27 nuxt 26 better-auth 26 devalue 25 handlebars 22 @openzeppelin/contracts-upgradeable 22 @xmldom/xmldom 22 tar 21 fuxa-server 21 tinymce 21 react-router 20 @openzeppelin/contracts 20 @sveltejs/kit 20 liquidjs 19 sequelize 18 signalk-server 17 @backstage/plugin-scaffolder-backend 17
All Critical High Medium Low Exploited only Public exploit

1,411 results · Clear filters · Feed

  • Critical 9.8
    GHSA-6f93-xj8r-jp82

    Malicious Package in bunfer-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    bunfer-xor npm
  • Critical 9.8
    GHSA-7xf6-cpxm-5mx9

    Malicious Package in bufner-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    bufner-xor npm
  • Critical 9.8
    GHSA-cr4x-w2v7-4mmf

    Malicious Package in bufver-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    bufver-xor npm
  • Critical 9.8
    GHSA-2w8q-69fh-9gq6

    Malicious Package in bufger-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    bufger-xor npm
  • Critical 9.8
    GHSA-p7qp-3fh7-pv4p

    Malicious Package in buffur-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffur-xor npm
  • Critical 9.8
    GHSA-wv39-cgmm-cq29

    Malicious Package in buffmr-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffmr-xor npm
  • Critical 9.8
    GHSA-r9cj-xj33-4q42

    Malicious Package in buffgr-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffgr-xor npm
  • Critical 9.8
    GHSA-7frr-c83r-fm22

    Malicious Package in buffez-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffez-xor npm
  • Critical 9.8
    GHSA-x3w4-mrmv-cw2x

    Malicious Package in buffev-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffev-xor npm
  • Critical 9.8
    GHSA-28f4-mjfq-qrvf

    Malicious Package in buffes-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffes-xor npm
  • Critical 9.8
    GHSA-536f-268f-6gxc

    Malicious Package in buffermxor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffermxor npm
  • Critical 9.8
    GHSA-f294-27fc-wgj7

    Malicious Package in buffer-zor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffer-zor npm
  • Critical 9.8
    GHSA-g2c4-4m64-vxm3

    Malicious Package in buffer-yor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffer-yor npm
  • Critical 9.8
    GHSA-j6x7-42x2-hpcf

    Malicious Package in buffer-xoz

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffer-xoz npm
  • Critical 9.8
    GHSA-3h9m-9g3g-5wqx

    Malicious Package in buffer-xov

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffer-xov npm
  • Critical 9.8
    GHSA-h2j3-gg8w-4858

    Malicious Package in buffer-xos

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffer-xos npm
  • Critical 9.8
    GHSA-jqjg-v355-hr9q

    Malicious Package in buffer-xop

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffer-xop npm
  • Critical 9.8
    GHSA-gpg2-7r7j-4pm9

    Malicious Package in buffer-xob

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffer-xob npm
  • Critical 9.8
    GHSA-f72h-wf57-7xwh

    Malicious Package in buffer-xo2

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffer-xo2 npm
  • Critical 9.8
    GHSA-c4hh-fg8x-6h9p

    Malicious Package in buffer-xnr

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffer-xnr npm
  • Critical 9.8
    GHSA-5327-gfq5-8f4m

    Malicious Package in buffer-xmr

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffer-xmr npm
  • Critical 9.8
    GHSA-rw53-q8x7-ccx8

    Malicious Package in buffer-xkr

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffer-xkr npm
  • Critical 9.8
    GHSA-mp55-2274-4pj8

    Malicious Package in buffer-xgr

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffer-xgr npm
  • Critical 9.8
    GHSA-6xg2-cf6h-x4v8

    Malicious Package in buffer-por

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffer-por npm
  • Critical 9.8
    GHSA-wh87-3959-vfrq

    Malicious Package in buffer-hor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffer-hor npm
  • Critical 9.8
    GHSA-73wv-v82c-xmqv

    Malicious Package in buffep-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffep-xor npm
  • Critical 9.8
    GHSA-4hm7-73ch-vm59

    Malicious Package in buffer-8or

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffer-8or npm
  • Critical 9.8
    GHSA-3f97-rj68-2pjf

    Malicious Package in buffe2-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffe2-xor npm
  • Critical 9.8
    GHSA-5ggx-g294-qj3q

    Malicious Package in buffeb-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffeb-xor npm
  • Critical 9.8
    GHSA-8549-p68h-m9mc

    Malicious Package in buffdr-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffdr-xor npm
  • Critical 9.8
    GHSA-w9q5-mvc6-5cw3

    Malicious Package in bufder-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    bufder-xor npm
  • Critical 9.8
    GHSA-f64g-whxf-w8f2

    Malicious Package in buffar-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    buffar-xor npm
  • Critical 9.8
    GHSA-6584-gfwm-3vc3

    Malicious Package in budfer-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    budfer-xor npm
  • Critical 9.8
    GHSA-p9g3-vpvp-hcj5

    Malicious Package in bufber-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    bufber-xor npm
  • Critical 9.8
    GHSA-vm67-mh96-95mq

    Malicious Package in bubfer-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    bubfer-xor npm
  • Critical 9.8
    GHSA-8hrq-9wm7-v3jw

    Malicious Package in btffer-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    btffer-xor npm
  • Critical 9.8
    GHSA-pxqp-mv67-g528

    Malicious Package in bqffer-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    bqffer-xor npm
  • Critical 9.8
    GHSA-7cvf-p83w-48q6

    Malicious Package in beffer-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    beffer-xor npm
  • Critical 9.8
    GHSA-jvfv-jhw9-jmpp

    Malicious Package in b5ffer-xor

    Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.

    b5ffer-xor npm
  • Critical —
    GHSA-mjjq-c88q-qhr6

    Cross-Site Scripting in dompurify

    Versions of `dompurify` prior to 2.0.7 are vulnerable to Cross-Site Scripting (XSS). It is possible to bypass the package sanitization through Mutation XSS, which may allow an attacker to execute arbitrary JavaScript in a victim's browser. ## Recommendation U…

    dompurify npm