0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
veloq
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting veloq, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-14566 | Unknown | Malicious code in veloq (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (058b0f85e80ad1893e8546161034450eaac2165d5eb7299710f0870bc26b05b2) veloq@1.1.0 is a near-verbatim fork of gulplog rebranded by 'Blockvora Team', with two injected lines inside getLogger() in index.js: a call to sigcheck.saveLog('favorite.png', 'veloq', 12467) and require('./log'). The './log' file is not present in the package tarball (the manifest's files array lists only LICENSE and index.js), so the require will only resolve if sigcheck.saveLog has written it to the package directory as a side effect. T |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (058b0f85e80ad1893e8546161034450eaac2165d5eb7299710f0870bc26b05b2) veloq@1.1.0 is a near-verbatim fork of gulplog rebranded by 'Blockvora Team', with two injected lines inside getLogger() in index.js: a call to sigcheck.saveLog('favorite.png', 'veloq', 12467) and require('./log'). The './log' file is not present in the package tarball (the manifest's files array lists only LICENSE and index.js), so the require will only resolve if sigcheck.saveLog has written it to the package directory as a side effect. T