Skip to content
OpenAdvisories

Product · Qix-

node-backslash

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-59140

    backslash@0.2.1 contains malware after npm account takeover

    backlash parses collected strings with escapes. On 8 September 2025, the npm publishing account for backslash was taken over after a phishing attack. Version 0.2.1 was published, functionally identical to the previous patch version, but with a malware payload…

    Qix- node-backslash backslash npm