Skip to content
OpenAdvisories

Package · npm

jquerz

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    GHSA-c6f3-3c98-2j2f

    Malicious Package in jquerz

    Version 1.0.1 of `jquerz` contains malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote serve…

    jquerz npm