0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
veldora
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting veldora, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-11018 | Unknown | Malicious code in veldora (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (4a848da2622d0adc27e55e1a650c39892aea7ef22c81c4c6ed4e5b6dc64809de) Package veldora@1.0.1 was scanned across 6 files. No evidence of install-time or import-time execution of remote content, no credential or environment variable collection, no hardcoded attacker-controlled network destinations, no lifecycle scripts fetching external payloads, and no obfuscated code paths were observed. The package does not exhibit any of the standard supply-chain attack fingerprints (exfiltration, dropper, silent-relay, back |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (4a848da2622d0adc27e55e1a650c39892aea7ef22c81c4c6ed4e5b6dc64809de) Package veldora@1.0.1 was scanned across 6 files. No evidence of install-time or import-time execution of remote content, no credential or environment variable collection, no hardcoded attacker-controlled network destinations, no lifecycle scripts fetching external payloads, and no obfuscated code paths were observed. The package does not exhibit any of the standard supply-chain attack fingerprints (exfiltration, dropper, silent-relay, back