Malicious versions reported for this package
- MAL-2026-18624 — 1.16.0 · Nov 4, 2026
1 result · Feed
-
Critical 9.8
Command Injection via `format` option in screenshot-desktop
screenshot-desktop allows capturing a screenshot of your local machine. This vulnerability is a command injection issue. When user-controlled input is passed into the format option of the screenshot function, it is interpolated into a shell command without sa…