Skip to content
OpenAdvisories

Package · npm

node-ipc

3 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Low —
    GHSA-3mpp-xfvh-qh37

    node-ipc behavior change

    node-ipc starting in version 11.0.0 and prior to version 12.0.0 includes a message from the maintainer that is written to the user’s desktop. Please review the version changes before proceeding.

    node-ipc npm
  • Low —
    GHSA-8gr3-2gjw-jj7g

    Hidden functionality in node-ipc

    The package node-ipc version 9.2.2 is vulnerable to hidden functionality that was introduced by the maintainer. The package uses a dependency that writes a file to disk that does not pertain to the functionality of the package and is not included in versions …

    node-ipc npm
  • Critical 9.8
    CVE-2022-23812 Public exploit

    Malicious Package

    This affects the package node-ipc from 10.1.1 and before 10.1.3. This package contains malicious code, that targets users with IP located in Russia or Belarus, and overwrites their files with a heart emoji. **Note**: from versions 11.0.0 onwards, instead of h…

    node-ipc npm