# CWE-506. Every Advisory and CVE whose sources give the weakness CWE-506, newest first. ## Records, newest first (an older page) - [Malicious Package in bictoind-rpc](https://agentprime.io/advisories/GHSA-jqvv-r4w3-8f7w.md) `GHSA-jqvv-r4w3-8f7w` · npm `bictoind-rpc`: affected `>=0.0.0`, no fixed version yet · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2020 · Tags: CWE-506 - [Malicious Package in bictoin-ops](https://agentprime.io/advisories/GHSA-xrrg-wfwc-c7r3.md) `GHSA-xrrg-wfwc-c7r3` · npm `bictoin-ops`: affected `>=0.0.0`, no fixed version yet · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2020 · Tags: CWE-506 - [Malicious Package in bconi](https://agentprime.io/advisories/GHSA-7j93-5m2h-rvjx.md) `GHSA-7j93-5m2h-rvjx` · npm `bconi`: affected `>=0.0.0`, no fixed version yet · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2020 · Tags: CWE-506 - [Malicious Package in bcion](https://agentprime.io/advisories/GHSA-2fwq-wx47-hm6x.md) `GHSA-2fwq-wx47-hm6x` · npm `bcion`: affected `>=0.0.0`, no fixed version yet · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2020 · Tags: CWE-506 - [Malicious Package in baes-x](https://agentprime.io/advisories/GHSA-2jm5-2cqf-6vw9.md) `GHSA-2jm5-2cqf-6vw9` · npm `baes-x`: affected `>=0.0.0`, no fixed version yet · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2020 · Tags: CWE-506 - [Malicious Package in babel-loqder](https://agentprime.io/advisories/GHSA-9cph-cqqh-36pw.md) `GHSA-9cph-cqqh-36pw` · npm `babel-loqder`: affected `>=0.0.0`, no fixed version yet · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2020 · Tags: CWE-506 - [Malicious Package in babel-loadre](https://agentprime.io/advisories/GHSA-vvfh-mvjv-w38q.md) `GHSA-vvfh-mvjv-w38q` · npm `babel-loadre`: affected `>=0.0.0`, no fixed version yet · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2020 · Tags: CWE-506 - [Malicious Package in babel-laoder](https://agentprime.io/advisories/GHSA-qp6m-jqfr-2f7v.md) `GHSA-qp6m-jqfr-2f7v` · npm `babel-laoder`: affected `>=0.0.0`, no fixed version yet · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2020 · Tags: CWE-506 - [Malicious Package in cxct](https://agentprime.io/advisories/GHSA-c5xm-m64m-f2vq.md) `GHSA-c5xm-m64m-f2vq` · npm `cxct`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2020 · Tags: CWE-506 - [Malicious Package in malicious-npm-package](https://agentprime.io/advisories/GHSA-49c6-3wr4-8jr4.md) `GHSA-49c6-3wr4-8jr4` · npm `malicious-npm-package`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2020 · Tags: CWE-506 - [Malicious Package in sj-labc](https://agentprime.io/advisories/GHSA-4fqg-89cc-5pv5.md) `GHSA-4fqg-89cc-5pv5` · npm `sj-labc`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2020 · Tags: CWE-506 - [Malicious Package in superhappyfuntime](https://agentprime.io/advisories/GHSA-6qgx-f452-7699.md) `GHSA-6qgx-f452-7699` · npm `superhappyfuntime`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in arsenic-tabasco-cyborg-peanut-butter](https://agentprime.io/advisories/GHSA-r742-7j4h-hjr8.md) `GHSA-r742-7j4h-hjr8` · npm `arsenic-tabasco-cyborg-peanut-butter`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in sj-tw-abc](https://agentprime.io/advisories/GHSA-4hfc-fv33-ph9p.md) `GHSA-4hfc-fv33-ph9p` · npm `sj-tw-abc`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in sj-tw-sec](https://agentprime.io/advisories/GHSA-692h-g37c-qv44.md) `GHSA-692h-g37c-qv44` · npm `sj-tw-sec`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in sj-tw-test-security](https://agentprime.io/advisories/GHSA-rcv7-4w2m-gj9v.md) `GHSA-rcv7-4w2m-gj9v` · npm `sj-tw-test-security`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in owl-orchard-apple-sunshine](https://agentprime.io/advisories/GHSA-h24p-2c3m-5qf4.md) `GHSA-h24p-2c3m-5qf4` · npm `owl-orchard-apple-sunshine`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in zs-sha3](https://agentprime.io/advisories/GHSA-7696-qr5q-pg37.md) `GHSA-7696-qr5q-pg37` · npm `zs-sha3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in ns-sha3](https://agentprime.io/advisories/GHSA-j67m-jg9p-ppg4.md) `GHSA-j67m-jg9p-ppg4` · npm `ns-sha3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in ks-sha3](https://agentprime.io/advisories/GHSA-563h-49v8-g7x4.md) `GHSA-563h-49v8-g7x4` · npm `ks-sha3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in jw-sha3](https://agentprime.io/advisories/GHSA-8g3r-968r-c644.md) `GHSA-8g3r-968r-c644` · npm `jw-sha3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in jsmsha3](https://agentprime.io/advisories/GHSA-657v-jjf8-83gh.md) `GHSA-657v-jjf8-83gh` · npm `jsmsha3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in js-sxa3](https://agentprime.io/advisories/GHSA-jh67-3wqw-cvhr.md) `GHSA-jh67-3wqw-cvhr` · npm `js-sxa3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in js-wha3](https://agentprime.io/advisories/GHSA-785g-gx74-gr39.md) `GHSA-785g-gx74-gr39` · npm `js-wha3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in js-sla3](https://agentprime.io/advisories/GHSA-h6m3-cx24-9626.md) `GHSA-h6m3-cx24-9626` · npm `js-sla3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in js-sja3](https://agentprime.io/advisories/GHSA-6343-m2qr-66gf.md) `GHSA-6343-m2qr-66gf` · npm `js-sja3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in js-sia3](https://agentprime.io/advisories/GHSA-3mhm-jvqj-fvhg.md) `GHSA-3mhm-jvqj-fvhg` · npm `js-sia3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in js-shq3](https://agentprime.io/advisories/GHSA-766v-7gjx-55hf.md) `GHSA-766v-7gjx-55hf` · npm `js-shq3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in js-shi3](https://agentprime.io/advisories/GHSA-g37j-v5gh-g25c.md) `GHSA-g37j-v5gh-g25c` · npm `js-shi3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in js-she3](https://agentprime.io/advisories/GHSA-f8jj-45fj-44r6.md) `GHSA-f8jj-45fj-44r6` · npm `js-she3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in js-shc3](https://agentprime.io/advisories/GHSA-69mf-2cw2-38m8.md) `GHSA-69mf-2cw2-38m8` · npm `js-shc3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in js-shas](https://agentprime.io/advisories/GHSA-5wq6-v5cw-jvfr.md) `GHSA-5wq6-v5cw-jvfr` · npm `js-shas`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in js-sha7](https://agentprime.io/advisories/GHSA-hvgc-mggg-pxr2.md) `GHSA-hvgc-mggg-pxr2` · npm `js-sha7`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in js-rha3](https://agentprime.io/advisories/GHSA-95cg-3r4g-7w6j.md) `GHSA-95cg-3r4g-7w6j` · npm `js-rha3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in js-qha3](https://agentprime.io/advisories/GHSA-vf5m-q45w-8mh9.md) `GHSA-vf5m-q45w-8mh9` · npm `js-qha3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in js-cha3](https://agentprime.io/advisories/GHSA-7xf9-74cp-8hx3.md) `GHSA-7xf9-74cp-8hx3` · npm `js-cha3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in js-3ha3](https://agentprime.io/advisories/GHSA-52c9-458g-whrf.md) `GHSA-52c9-458g-whrf` · npm `js-3ha3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in jr-sha3](https://agentprime.io/advisories/GHSA-67mp-pcv9-vvq6.md) `GHSA-67mp-pcv9-vvq6` · npm `jr-sha3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in jq-sha3](https://agentprime.io/advisories/GHSA-x8m7-cv39-xmg9.md) `GHSA-x8m7-cv39-xmg9` · npm `jq-sha3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in jc-sha3](https://agentprime.io/advisories/GHSA-gfj6-p24g-6hpm.md) `GHSA-gfj6-p24g-6hpm` · npm `jc-sha3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in j3-sha3](https://agentprime.io/advisories/GHSA-p3jx-g34v-q56j.md) `GHSA-p3jx-g34v-q56j` · npm `j3-sha3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in hs-sha3](https://agentprime.io/advisories/GHSA-6mrq-7r7m-hh4p.md) `GHSA-6mrq-7r7m-hh4p` · npm `hs-sha3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in bs-sha3](https://agentprime.io/advisories/GHSA-88xx-23mf-rcj2.md) `GHSA-88xx-23mf-rcj2` · npm `bs-sha3`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in ruffer-xor](https://agentprime.io/advisories/GHSA-2mxc-m4c3-wqhq.md) `GHSA-2mxc-m4c3-wqhq` · npm `ruffer-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in juffer-xor](https://agentprime.io/advisories/GHSA-gqq4-937c-2282.md) `GHSA-gqq4-937c-2282` · npm `juffer-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in fuffer-xor](https://agentprime.io/advisories/GHSA-c2g6-57fp-22wp.md) `GHSA-c2g6-57fp-22wp` · npm `fuffer-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in cuffer-xor](https://agentprime.io/advisories/GHSA-6xm4-p6r2-mwrc.md) `GHSA-6xm4-p6r2-mwrc` · npm `cuffer-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in bwffer-xor](https://agentprime.io/advisories/GHSA-7qg7-6g3g-8vxg.md) `GHSA-7qg7-6g3g-8vxg` · npm `bwffer-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buvfer-xor](https://agentprime.io/advisories/GHSA-wjpj-gmc3-5w56.md) `GHSA-wjpj-gmc3-5w56` · npm `buvfer-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in bugfer-xor](https://agentprime.io/advisories/GHSA-8g64-9cm2-838j.md) `GHSA-8g64-9cm2-838j` · npm `bugfer-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in bunfer-xor](https://agentprime.io/advisories/GHSA-6f93-xj8r-jp82.md) `GHSA-6f93-xj8r-jp82` · npm `bunfer-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in bufner-xor](https://agentprime.io/advisories/GHSA-7xf6-cpxm-5mx9.md) `GHSA-7xf6-cpxm-5mx9` · npm `bufner-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in bufver-xor](https://agentprime.io/advisories/GHSA-cr4x-w2v7-4mmf.md) `GHSA-cr4x-w2v7-4mmf` · npm `bufver-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in bufger-xor](https://agentprime.io/advisories/GHSA-2w8q-69fh-9gq6.md) `GHSA-2w8q-69fh-9gq6` · npm `bufger-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffur-xor](https://agentprime.io/advisories/GHSA-p7qp-3fh7-pv4p.md) `GHSA-p7qp-3fh7-pv4p` · npm `buffur-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffmr-xor](https://agentprime.io/advisories/GHSA-wv39-cgmm-cq29.md) `GHSA-wv39-cgmm-cq29` · npm `buffmr-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffgr-xor](https://agentprime.io/advisories/GHSA-r9cj-xj33-4q42.md) `GHSA-r9cj-xj33-4q42` · npm `buffgr-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffez-xor](https://agentprime.io/advisories/GHSA-7frr-c83r-fm22.md) `GHSA-7frr-c83r-fm22` · npm `buffez-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffev-xor](https://agentprime.io/advisories/GHSA-x3w4-mrmv-cw2x.md) `GHSA-x3w4-mrmv-cw2x` · npm `buffev-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 - [Malicious Package in buffes-xor](https://agentprime.io/advisories/GHSA-28f4-mjfq-qrvf.md) `GHSA-28f4-mjfq-qrvf` · npm `buffes-xor`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-506 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .