0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
peptide-packets-js-unimode
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting peptide-packets-js-unimode, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-11447 | Unknown | Malicious code in @peptide-packets/js-unimode (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (fdbac126c4dd058b5bbdeaf3b962acf9e6adce490c77b90545db33b97a878082) index.js in @peptide-packets/js-unimode exposes a listMods() function that decodes a base64-encoded URL pointing to a GitHub gist owned by user emmettesjunitya, fetches the gist's first file via the GitHub API, and passes the returned text directly to eval(). Any consumer that calls listMods() executes whatever JavaScript the gist owner has published at that moment, in-process, with full privileges of the host application. The gist is mutab |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (fdbac126c4dd058b5bbdeaf3b962acf9e6adce490c77b90545db33b97a878082) index.js in @peptide-packets/js-unimode exposes a listMods() function that decodes a base64-encoded URL pointing to a GitHub gist owned by user emmettesjunitya, fetches the gist's first file via the GitHub API, and passes the returned text directly to eval(). Any consumer that calls listMods() executes whatever JavaScript the gist owner has published at that moment, in-process, with full privileges of the host application. The gist is mutab