0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
sqlite-prime-createsql
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting sqlite-prime-createsql, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-13715 | Unknown | Malicious code in @sqlite-prime/createsql (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (01e898636f16aeaf0f90bb35efaccc41186222d35f564d37c65dd1aaf471e03e) On require/import, index.js constructs a GitHub Gist API URL (https://api.github.com/gists/198a0bbec7a6018e9250615d26e37b90, owned by user 'getchainverse'), fetches the gist JSON, and passes the first file's content directly to eval(). The executed code is not present in the package tarball and can be modified by the gist owner at any time, resulting in arbitrary code execution in any process that loads this package. The endpoint URL is ass |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (01e898636f16aeaf0f90bb35efaccc41186222d35f564d37c65dd1aaf471e03e) On require/import, index.js constructs a GitHub Gist API URL (https://api.github.com/gists/198a0bbec7a6018e9250615d26e37b90, owned by user 'getchainverse'), fetches the gist JSON, and passes the first file's content directly to eval(). The executed code is not present in the package tarball and can be modified by the gist owner at any time, resulting in arbitrary code execution in any process that loads this package. The endpoint URL is ass