Skip to content
OpenAdvisories

Vendor

colorjs

1 known vulnerabilities.

Products

color-name 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-59145

    color-name@2.0.1 contains malware after npm account takeover

    color-name is a JSON with CSS color names. On 8 September 2025, an npm publishing account for color-name was taken over after a phishing attack. Version 2.0.1 was published, functionally identical to the previous patch version, but with a malware payload adde…

    colorjs color-name color-name npm