Malicious versions reported for this package
- MAL-2026-3744 — 9.1.6, 9.2.3, 12.0.1 · May 14, 2026
2 results · Clear filters · Feed
-
Low —
node-ipc behavior change
node-ipc starting in version 11.0.0 and prior to version 12.0.0 includes a message from the maintainer that is written to the user’s desktop. Please review the version changes before proceeding.
-
Low —
Hidden functionality in node-ipc
The package node-ipc version 9.2.2 is vulnerable to hidden functionality that was introduced by the maintainer. The package uses a dependency that writes a file to disk that does not pertain to the functionality of the package and is not included in versions …