Skip to content
OpenAdvisories

Package · npm

loadyaml

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical —
    GHSA-mfc2-93pr-jf92

    Malicious code in `loadyaml`

    npm packages `loadyaml` and `electorn` were removed from the npm registry for containing malicious code. Upon installation the package runs a preinstall script that writes a public comment on GitHub containing the following information: - IP and IP-based geol…

    loadyaml npm