# CWE-506. Every Advisory and CVE whose sources give the weakness CWE-506, newest first. ## Records, newest first (an older page) - [Malicious Package in commnader](https://agentprime.io/advisories/GHSA-855m-jchh-9qjc.md) `GHSA-855m-jchh-9qjc` · npm `commnader`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-506 - [Malicious Package in exprss](https://agentprime.io/advisories/GHSA-6qc7-jgq7-34rf.md) `GHSA-6qc7-jgq7-34rf` · npm `exprss`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-506 - [Malicious Package in momen](https://agentprime.io/advisories/GHSA-h5vm-jhq7-w647.md) `GHSA-h5vm-jhq7-w647` · npm `momen`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-506 - [Malicious Package in aysnc](https://agentprime.io/advisories/GHSA-gfjr-xqhm-qvv3.md) `GHSA-gfjr-xqhm-qvv3` · npm `aysnc`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-506 - [Malicious Package in asnyc](https://agentprime.io/advisories/GHSA-v99v-xgjx-7m7g.md) `GHSA-v99v-xgjx-7m7g` · npm `asnyc`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-506 - [Malicious Package in asycn](https://agentprime.io/advisories/GHSA-h26f-j4mv-84g7.md) `GHSA-h26f-j4mv-84g7` · npm `asycn`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-506 - [Malicious Package in asnc](https://agentprime.io/advisories/GHSA-2p99-6f47-8x9j.md) `GHSA-2p99-6f47-8x9j` · npm `asnc`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-506 - [Malicious Package in aasync](https://agentprime.io/advisories/GHSA-9mjp-gv34-3jcf.md) `GHSA-9mjp-gv34-3jcf` · npm `aasync`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-506 - [Malicious Package in asyync](https://agentprime.io/advisories/GHSA-rm7c-x424-g2mw.md) `GHSA-rm7c-x424-g2mw` · npm `asyync`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-506 - [Malicious Package in asynnc](https://agentprime.io/advisories/GHSA-5fm9-jmv7-fcx5.md) `GHSA-5fm9-jmv7-fcx5` · npm `asynnc`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-506 - [Malicious Package in asymc](https://agentprime.io/advisories/GHSA-x6ch-c6rv-f7wh.md) `GHSA-x6ch-c6rv-f7wh` · npm `asymc`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-506 - [Malicious Package in asinc](https://agentprime.io/advisories/GHSA-87qw-7v97-w34r.md) `GHSA-87qw-7v97-w34r` · npm `asinc`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-506 - [Malicious Package in wepack-cli](https://agentprime.io/advisories/GHSA-fpw3-x4xq-6vxq.md) `GHSA-fpw3-x4xq-6vxq` · npm `wepack-cli`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-506 - [Malicious Package in jajajejejiji](https://agentprime.io/advisories/GHSA-rggq-f2wf-m6cp.md) `GHSA-rggq-f2wf-m6cp` · npm `jajajejejiji`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-506 - [Malicious Package in 4equest](https://agentprime.io/advisories/GHSA-p33q-w45h-2hcj.md) `GHSA-p33q-w45h-2hcj` · npm `4equest`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-506 - [Malicious Package in portionfatty12](https://agentprime.io/advisories/GHSA-p8fm-w787-x6x3.md) `GHSA-p8fm-w787-x6x3` · npm `portionfatty12`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-506 - [Malicious Package in rrgod](https://agentprime.io/advisories/GHSA-277p-xwpp-3jf7.md) `GHSA-277p-xwpp-3jf7` · npm `rrgod`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-506 - [Malicious Package in commander-js](https://agentprime.io/advisories/GHSA-2hqf-qqmq-pgpp.md) `GHSA-2hqf-qqmq-pgpp` · npm `commander-js`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2020 · Tags: CWE-506 - [Entropy Backdoor in text-qrcode](https://agentprime.io/advisories/GHSA-h5vj-f7r9-w564.md) `GHSA-h5vj-f7r9-w564` · npm `text-qrcode`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in flatmap-stream](https://agentprime.io/advisories/GHSA-9x64-5r7x-2q53.md) `GHSA-9x64-5r7x-2q53` · npm `flatmap-stream`: affected `=0.1.1`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in foever](https://agentprime.io/advisories/GHSA-j3qq-qvc8-c6g7.md) `GHSA-j3qq-qvc8-c6g7` · npm `foever`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in soket.js](https://agentprime.io/advisories/GHSA-x6gq-467r-hwcc.md) `GHSA-x6gq-467r-hwcc` · npm `soket.js`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in soket.io](https://agentprime.io/advisories/GHSA-wp2p-q35g-3rjj.md) `GHSA-wp2p-q35g-3rjj` · npm `soket.io`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in regenraotr](https://agentprime.io/advisories/GHSA-5x7p-gm79-383m.md) `GHSA-5x7p-gm79-383m` · npm `regenraotr`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in regenrator](https://agentprime.io/advisories/GHSA-m5p4-7wf9-6w99.md) `GHSA-m5p4-7wf9-6w99` · npm `regenrator`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in axois](https://agentprime.io/advisories/GHSA-wpfc-3w63-g4hm.md) `GHSA-wpfc-3w63-g4hm` · npm `axois`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in boogeyman](https://agentprime.io/advisories/GHSA-9hc2-w9gg-q6jw.md) `GHSA-9hc2-w9gg-q6jw` · npm `boogeyman`: affected `>=0.0.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in eslint-config-airbnb-standard](https://agentprime.io/advisories/GHSA-m852-866j-69j8.md) `GHSA-m852-866j-69j8` · npm `eslint-config-airbnb-standard`: affected `>=2.0.0, <2.1.0`, fixed in `2.1.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in ladder-text-js](https://agentprime.io/advisories/GHSA-33gc-f8v9-v8hm.md) `GHSA-33gc-f8v9-v8hm` · npm `ladder-text-js`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in nothing-js](https://agentprime.io/advisories/GHSA-353r-3v84-9pjj.md) `GHSA-353r-3v84-9pjj` · npm `nothing-js`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in getcookies](https://agentprime.io/advisories/GHSA-3cjv-4phw-gvvv.md) `GHSA-3cjv-4phw-gvvv` · npm `getcookies`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in nginxbeautifier](https://agentprime.io/advisories/GHSA-28xx-8j99-m32j.md) `GHSA-28xx-8j99-m32j` · npm `nginxbeautifier`: affected `>=1.0.14, <1.0.15`, fixed in `1.0.15` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in json-serializer](https://agentprime.io/advisories/GHSA-7xfq-xh6v-4mrm.md) `GHSA-7xfq-xh6v-4mrm` · npm `json-serializer`: affected `>=2.0.10, <2.0.11`, fixed in `2.0.11` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in freshdom](https://agentprime.io/advisories/GHSA-8qm2-24qc-c4qg.md) `GHSA-8qm2-24qc-c4qg` · npm `freshdom`: affected `=0.0.6`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in impala](https://agentprime.io/advisories/GHSA-92px-q4w8-hrr5.md) `GHSA-92px-q4w8-hrr5` · npm `impala`: affected `=1.1.7`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in dossier](https://agentprime.io/advisories/GHSA-c8h6-89q2-mgv8.md) `GHSA-c8h6-89q2-mgv8` · npm `dossier`: affected `=0.0.4`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in dynamo-schema](https://agentprime.io/advisories/GHSA-vp8g-53fw-r9f2.md) `GHSA-vp8g-53fw-r9f2` · npm `dynamo-schema`: affected `=0.0.3`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in cordova-plugin-china-picker](https://agentprime.io/advisories/GHSA-x9gm-qxhh-rf75.md) `GHSA-x9gm-qxhh-rf75` · npm `cordova-plugin-china-picker`: affected `=1.0.910`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in codify](https://agentprime.io/advisories/GHSA-2q6w-rxf3-4wc9.md) `GHSA-2q6w-rxf3-4wc9` · npm `codify`: affected `=0.3.1`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in blingjs](https://agentprime.io/advisories/GHSA-hfc6-79wv-5hpw.md) `GHSA-hfc6-79wv-5hpw` · npm `blingjs`: affected `=0.0.4`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in awesome_react_utility](https://agentprime.io/advisories/GHSA-m25q-fwg4-9v2p.md) `GHSA-m25q-fwg4-9v2p` · npm `awesome_react_utility`: affected `=1.0.2`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in another-date-range-picker](https://agentprime.io/advisories/GHSA-8rxg-9g6f-vq9p.md) `GHSA-8rxg-9g6f-vq9p` · npm `another-date-range-picker`: affected `=4.1.48`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in another-date-picker](https://agentprime.io/advisories/GHSA-2p62-c4rm-mr72.md) `GHSA-2p62-c4rm-mr72` · npm `another-date-picker`: affected `>=2.0.43, <2.0.45`, fixed in `2.0.45` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in angular-material-sidenav-rnd](https://agentprime.io/advisories/GHSA-qmxf-fxq7-w59f.md) `GHSA-qmxf-fxq7-w59f` · npm `angular-material-sidenav-rnd`: affected `=0.1.1`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in angular-bmap](https://agentprime.io/advisories/GHSA-w8hg-mxvh-9h57.md) `GHSA-w8hg-mxvh-9h57` · npm `angular-bmap`: affected `=0.0.9`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Malicious Package in @impala/bmap](https://agentprime.io/advisories/GHSA-c82c-8pjw-6829.md) `GHSA-c82c-8pjw-6829` · npm `@impala/bmap`: affected `=1.0.3`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [cross-env.js is malware](https://agentprime.io/advisories/GHSA-hwhq-3hrj-v6v5.md) `GHSA-hwhq-3hrj-v6v5`, `CVE-2017-16081` · npm `cross-env.js`: affected `>=0.0.0`, no fixed version yet · No CVSS score · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Nodesass is malware](https://agentprime.io/advisories/GHSA-xfmw-2vmm-579c.md) `GHSA-xfmw-2vmm-579c`, `CVE-2017-16080` · npm `nodesass`: affected `>=0.0.0`, no fixed version yet · No CVSS score · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [mysqljs is malware](https://agentprime.io/advisories/GHSA-8gv6-g7vp-hr34.md) `GHSA-8gv6-g7vp-hr34`, `CVE-2017-16047` · npm `mysqljs`: affected `>=0.0.0`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [npm-script-demo is malware](https://agentprime.io/advisories/GHSA-322m-p39j-r5m2.md) `GHSA-322m-p39j-r5m2`, `CVE-2017-16128` · npm `npm-script-demo`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-506 - [Potentially tampered sources on Play Store for Chameleon Mini Live Debugger](https://agentprime.io/advisories/CVE-2020-15165.md) `CVE-2020-15165` · CVE record: maxieds ChameleonMiniLiveDebugger · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2020 · Tags: CWE-506 - [lodahs is malware](https://agentprime.io/advisories/GHSA-hm6q-r2jc-cpqh.md) `GHSA-hm6q-r2jc-cpqh`, `CVE-2019-19771` · npm `lodahs`: affected `>=0.0.1`, no fixed version yet · CVSS 8.8 High · Not analysed yet · Published 16 Dec 2019 · Tags: CWE-506 - [Critical severity vulnerability that affects event-stream and flatmap-stream](https://agentprime.io/advisories/GHSA-mh6f-8j2x-4483.md) `GHSA-mh6f-8j2x-4483` · npm `event-stream` and 1 more: affected `>=3.3.6, <4.0.0`, fixed in `4.0.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Nov 2018 · Tags: CWE-506 - [sqlserver is malware](https://agentprime.io/advisories/GHSA-3rh7-vm4x-q2hp.md) `GHSA-3rh7-vm4x-q2hp`, `CVE-2017-16055` · npm `sqlserver`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 9 Nov 2018 · Tags: CWE-506 - [gruntcli is malware](https://agentprime.io/advisories/GHSA-9fg5-f5pj-rwcc.md) `GHSA-9fg5-f5pj-rwcc`, `CVE-2017-16058` · npm `gruntcli`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 9 Nov 2018 · Tags: CWE-506 - [mssql-node is malware](https://agentprime.io/advisories/GHSA-3p8f-j2vw-7hw9.md) `GHSA-3p8f-j2vw-7hw9`, `CVE-2017-16059` · npm `mssql-node`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 9 Nov 2018 · Tags: CWE-506 - [mssql.js is malware](https://agentprime.io/advisories/GHSA-5mhv-9qw8-j63g.md) `GHSA-5mhv-9qw8-j63g`, `CVE-2017-16056` · npm `mssql.js`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 9 Nov 2018 · Tags: CWE-506 - [nodemssql is malware](https://agentprime.io/advisories/GHSA-9xgh-xgw5-p5cw.md) `GHSA-9xgh-xgw5-p5cw`, `CVE-2017-16057` · npm `nodemssql`: affected `<=1.0.2`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 9 Nov 2018 · Tags: CWE-506 - [node-tkinter is malware](https://agentprime.io/advisories/GHSA-mwcv-m549-5cm8.md) `GHSA-mwcv-m549-5cm8`, `CVE-2017-16062` · npm `node-tkinter`: affected `<1.0.3`, fixed in `1.0.3` · CVSS 7.5 High · Not analysed yet · Published 1 Nov 2018 · Tags: CWE-506 - [tkinter is malware](https://agentprime.io/advisories/GHSA-rwg6-3fmj-w4wx.md) `GHSA-rwg6-3fmj-w4wx`, `CVE-2017-16061` · npm `tkinter`: affected `>=0.0.0`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 1 Nov 2018 · Tags: CWE-433, CWE-506 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .