Skip to content
OpenAdvisories

Package · npm

flatmap-stream

2 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    GHSA-9x64-5r7x-2q53

    Malicious Package in flatmap-stream

    Version 0.1.1 of `flatmap-stream` is considered malicious. This module runs an encrypted payload targeting a very specific application, `copay` and because they shared the same description it would have likely worked for `copay-dash`. The injected code: - Rea…

    flatmap-stream npm
  • Critical 9.8
    GHSA-mh6f-8j2x-4483

    Critical severity vulnerability that affects event-stream and flatmap-stream

    The NPM package `flatmap-stream` is considered malicious. A malicious actor added this package as a dependency to the NPM `event-stream` package in version `3.3.6`. Users of `event-stream` are encouraged to downgrade to the last non-malicious version, `3.3.4`…

    flatmap-stream event-stream npm