0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
xrelly-stack-bails
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting xrelly-stack-bails, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-17843 | Unknown | Malicious code in @xrelly-stack/bails (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (195817f808f7604633cfab5e678aea8d4bb53f116c72605d9a2f0852834c5ae3) package.json declares `whatsapp-rust-bridge-baron` as `git+https://github.com/7ucg/whatsapp-rust-bridge.git` — an unpinned git URL with no commit SHA and no tag. On `npm install`, npm fetches whatever the current HEAD of that repository returns and runs any lifecycle scripts inside it, with no integrity check and no version pinning. Whoever controls that GitHub repository controls install-time code execution on every machine that installs t |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (195817f808f7604633cfab5e678aea8d4bb53f116c72605d9a2f0852834c5ae3) package.json declares `whatsapp-rust-bridge-baron` as `git+https://github.com/7ucg/whatsapp-rust-bridge.git` — an unpinned git URL with no commit SHA and no tag. On `npm install`, npm fetches whatever the current HEAD of that repository returns and runs any lifecycle scripts inside it, with no integrity check and no version pinning. Whoever controls that GitHub repository controls install-time code execution on every machine that installs t