0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
birch-css-utils
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting birch-css-utils, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-18331 | Unknown | Malicious code in birch-css-utils (npm)birch-css-utils ships index.mjs, byte-identical to the noelc-css-blender payload, and an obfuscated build-cache.mjs that reassembles and exec()s encoded chunks. It is a new name for the noelc-css-blender (MAL-2026-18249) campaign; the file hashes below match that record's evidence. The package presents itself as an ordinary utility, so the code runs on import or install without the user knowing. --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (22815f068ecaf85065c389553848537859f9e37623285a9e71b3e81ee9e9b685) Package advertises itself as a zero-runtime |
| OSV (opens in a new tab) |
birch-css-utils ships index.mjs, byte-identical to the noelc-css-blender payload, and an obfuscated build-cache.mjs that reassembles and exec()s encoded chunks. It is a new name for the noelc-css-blender (MAL-2026-18249) campaign; the file hashes below match that record's evidence. The package presents itself as an ordinary utility, so the code runs on import or install without the user knowing. --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (22815f068ecaf85065c389553848537859f9e37623285a9e71b3e81ee9e9b685) Package advertises itself as a zero-runtime