Skip to content
OpenAdvisories

Package · npm

is-arrayish

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2025-59331

    is-arrayish@0.3.3 contains malware after npm account takeover

    is-arrayish checks if an object can be used like an Array. On 8 September 2025, an npm publishing account for is-arrayish was taken over after a phishing attack. Version 0.3.3 was published, functionally identical to the previous patch version, but with a mal…

    Qix- node-is-arrayish is-arrayish npm