Skip to content
OpenAdvisories

Package · npm

uglyfi-js

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    GHSA-9xww-fwh9-95c5

    Malicious Package in uglyfi-js

    Version 3.4.6 of `uglyfi-js` contains malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote se…

    uglyfi-js npm