FLAT-2IGKY (CVE-2025-66648)
Reflected cross-site scripting (XSS) In vega-functions
1.2
Low
Ecosystem: Npm
Package: vega-functions
FLAT-1AYVZ (CVE-2025-65110)
Reflected cross-site scripting (XSS) In vega-selections
5.9
Medium
Ecosystem: Npm
Package: vega-selections
FLAT-JG0I3 (CVE-2025-59840)
Reflected cross-site scripting (XSS) In vega-expression
5.7
Medium
Ecosystem: Npm
Package: vega-expression
FLAT-XSJ6A (MAL-2025-190408)
Use of software with malware In xo-mini-css-extract-plugin-vega-koa
5.2
Medium
Ecosystem: Npm
Package: xo-mini-css-extract-plugin-vega-koa
FLAT-MR9TC (MAL-2025-190135)
Use of software with malware In vega-toml-hexo-quito
5.2
Medium
Ecosystem: Npm
Package: vega-toml-hexo-quito
FLAT-BK8SX (MAL-2025-187559)
Use of software with malware In jabbah-areology-archaeometry-vega
5.2
Medium
Ecosystem: Npm
Package: jabbah-areology-archaeometry-vega
FLAT-S4AWZ (MAL-2025-188338)
Use of software with malware In nodemon-vega-umbriel-polaris
5.2
Medium
Ecosystem: Npm
Package: nodemon-vega-umbriel-polaris
FLAT-KRHC8 (MAL-2025-185592)
Use of software with malware In astrobiology-postgres-comet-vega
5.2
Medium
Ecosystem: Npm
Package: astrobiology-postgres-comet-vega
FLAT-QO87Z (MAL-2025-190131)
Use of software with malware In vega-cypress-miranda-tethys
5.2
Medium
Ecosystem: Npm
Package: vega-cypress-miranda-tethys
FLAT-3YU2L (MAL-2025-190134)
Use of software with malware In vega-panspermia-jwt-gemini
5.2
Medium
Ecosystem: Npm
Package: vega-panspermia-jwt-gemini
FLAT-UK0GA (MAL-2025-189770)
Use of software with malware In supernova-webdriver-mocha-centauri-vega
5.2
Medium
Ecosystem: Npm
Package: supernova-webdriver-mocha-centauri-vega
FLAT-6Z5KS (MAL-2025-190132)
Use of software with malware In vega-eclipse-paleoclimatology-lacerta
5.2
Medium
Ecosystem: Npm
Package: vega-eclipse-paleoclimatology-lacerta
FLAT-YXNIO (MAL-2025-187702)
Use of software with malware In koa-vega-zenith-canopus
5.2
Medium
Ecosystem: Npm
Package: koa-vega-zenith-canopus
FLAT-56ONU (MAL-2025-190130)
Use of software with malware In vega-commitlint-prosthetics-cressida
5.2
Medium
Ecosystem: Npm
Package: vega-commitlint-prosthetics-cressida
FLAT-P874R (MAL-2025-189743)
Use of software with malware In superagent-singularity-singularitarianism-vega
5.2
Medium
Ecosystem: Npm
Package: superagent-singularity-singularitarianism-vega
FLAT-82RB2 (MAL-2025-189788)
Use of software with malware In sync-vega-apex-prettier-plugin-markdown
5.2
Medium
Ecosystem: Npm
Package: sync-vega-apex-prettier-plugin-markdown
FLAT-WC2TP (MAL-2025-189430)
Use of software with malware In selenium-dotenv-parse-variables-gacrux-vega
5.2
Medium
Ecosystem: Npm
Package: selenium-dotenv-parse-variables-gacrux-vega
FLAT-FU0GT (MAL-2025-187378)
Use of software with malware In html-webpack-plugin-vega-atlas-fetch
5.2
Medium
Ecosystem: Npm
Package: html-webpack-plugin-vega-atlas-fetch
FLAT-FZ3XY (MAL-2025-189074)
Use of software with malware In radiometric-vega-element-ui-oortcloud
5.2
Medium
Ecosystem: Npm
Package: radiometric-vega-element-ui-oortcloud
FLAT-G3M8G (MAL-2025-186960)
Use of software with malware In fetch-ursa-vega-grus
5.2
Medium
Ecosystem: Npm
Package: fetch-ursa-vega-grus
FLAT-NOESO (MAL-2025-186475)
Use of software with malware In dagda-spawn-selenium-vega
5.2
Medium
Ecosystem: Npm
Package: dagda-spawn-selenium-vega
FLAT-5TSU7 (MAL-2025-185918)
Use of software with malware In browserify-seismology-vega-quito
5.2
Medium
Ecosystem: Npm
Package: browserify-seismology-vega-quito
FLAT-NNFUV (MAL-2025-185646)
Use of software with malware In augmentedreality-vega-chai-cosmogenic
5.2
Medium
Ecosystem: Npm
Package: augmentedreality-vega-chai-cosmogenic
FLAT-ZOZ9S (MAL-2025-187907)
Use of software with malware In magellan-vega-phoenix-hydrogeology
5.2
Medium
Ecosystem: Npm
Package: magellan-vega-phoenix-hydrogeology
FLAT-2ZBX4 (MAL-2025-190136)
Use of software with malware In vega-xerxes-meissa-chalk
5.2
Medium
Ecosystem: Npm
Package: vega-xerxes-meissa-chalk
FLAT-9R3AY (MAL-2025-186387)
Use of software with malware In cross-env-vega-native-blazar
5.2
Medium
Ecosystem: Npm
Package: cross-env-vega-native-blazar
FLAT-HAG6F (MAL-2025-190133)
Use of software with malware In vega-joviology-vega-bellatrix
5.2
Medium
Ecosystem: Npm
Package: vega-joviology-vega-bellatrix
FLAT-TA0FL (MAL-2025-188232)
Use of software with malware In neptune-vega-slides-browserify
5.2
Medium
Ecosystem: Npm
Package: neptune-vega-slides-browserify
FLAT-9XWD5 (MAL-2025-189751)
Use of software with malware In supercluster-vega-ceres-meissa
5.2
Medium
Ecosystem: Npm
Package: supercluster-vega-ceres-meissa
FLAT-92EL2 (MAL-2025-142518)
Use of software with malware In firebase-webdriver-manager-vega-neptune
5.2
Medium
Ecosystem: Npm
Package: firebase-webdriver-manager-vega-neptune
FLAT-96MVW (MAL-2025-148960)
Use of software with malware In uninstall-inquirer-vega-graphql
5.2
Medium
Ecosystem: Npm
Package: uninstall-inquirer-vega-graphql
FLAT-9ST3N (MAL-2025-144469)
Use of software with malware In lint-staged-ultra-vega-polaris
5.2
Medium
Ecosystem: Npm
Package: lint-staged-ultra-vega-polaris
FLAT-AT638 (MAL-2025-143360)
Use of software with malware In html-webpack-plugin-epimetheus-async-vega
5.2
Medium
Ecosystem: Npm
Package: html-webpack-plugin-epimetheus-async-vega
FLAT-B9RBB (MAL-2025-142602)
Use of software with malware In fork-vega-kaus-xanthus
5.2
Medium
Ecosystem: Npm
Package: fork-vega-kaus-xanthus
FLAT-BR5ET (MAL-2025-146123)
Use of software with malware In perseus-vega-leda-csrf
5.2
Medium
Ecosystem: Npm
Package: perseus-vega-leda-csrf
FLAT-C0S43 (MAL-2025-149086)
Use of software with malware In vega-chariklo-oberon-scripts
5.2
Medium
Ecosystem: Npm
Package: vega-chariklo-oberon-scripts
FLAT-C1XDJ (MAL-2025-140320)
Use of software with malware In callback-vega-ganymede-yildun
5.2
Medium
Ecosystem: Npm
Package: callback-vega-ganymede-yildun
FLAT-CDLS2 (MAL-2025-148039)
Use of software with malware In soap-vega-hydra-jasmine
5.2
Medium
Ecosystem: Npm
Package: soap-vega-hydra-jasmine
FLAT-CHF6T (MAL-2025-149686)
Use of software with malware In xenos-octans-bellatrix-vega
5.2
Medium
Ecosystem: Npm
Package: xenos-octans-bellatrix-vega
FLAT-CI4N8 (MAL-2025-142666)
Use of software with malware In foundation-antares-yaml-vega
5.2
Medium
Ecosystem: Npm
Package: foundation-antares-yaml-vega
FLAT-CIENZ (MAL-2025-142718)
Use of software with malware In frontend-vega-scripts-cli
5.2
Medium
Ecosystem: Npm
Package: frontend-vega-scripts-cli
FLAT-DIDBE (MAL-2025-149094)
Use of software with malware In vega-mongodb-electron-scripts
5.2
Medium
Ecosystem: Npm
Package: vega-mongodb-electron-scripts
FLAT-DIOZA (MAL-2025-145848)
Use of software with malware In ophiuchus-vega-xml-graphql
5.2
Medium
Ecosystem: Npm
Package: ophiuchus-vega-xml-graphql
FLAT-F43GB (MAL-2025-143078)
Use of software with malware In grunt-vega-deneb-uglify-js
5.2
Medium
Ecosystem: Npm
Package: grunt-vega-deneb-uglify-js
FLAT-FTD33 (MAL-2025-139816)
Use of software with malware In await-xanadu-jupiter-vega
5.2
Medium
Ecosystem: Npm
Package: await-xanadu-jupiter-vega
FLAT-G52RI (MAL-2025-149890)
Use of software with malware In zephyr-mdx-vega-reveal-md
5.2
Medium
Ecosystem: Npm
Package: zephyr-mdx-vega-reveal-md
FLAT-GKSJB (MAL-2025-148384)
Use of software with malware In superagent-kinetic-vega-materialize
5.2
Medium
Ecosystem: Npm
Package: superagent-kinetic-vega-materialize
FLAT-GNQIK (MAL-2025-140584)
Use of software with malware In chai-astro-vega-husky
5.2
Medium
Ecosystem: Npm
Package: chai-astro-vega-husky
FLAT-GSRG8 (MAL-2025-147046)
Use of software with malware In rate-limiter-postcss-vega-chromedriver
5.2
Medium
Ecosystem: Npm
Package: rate-limiter-postcss-vega-chromedriver
FLAT-H7EE6 (MAL-2025-148705)
Use of software with malware In toml-commitizen-vega-upgrade
5.2
Medium
Ecosystem: Npm
Package: toml-commitizen-vega-upgrade
FLAT-ZWLL6 (MAL-2025-139181)
Use of software with malware In acamar-ora-vega-triton
5.2
Medium
Ecosystem: Npm
Package: acamar-ora-vega-triton
FLAT-0JINT (MAL-2025-147523)
Use of software with malware In rollup-plugin-ultra-ganymede-vega
5.2
Medium
Ecosystem: Npm
Package: rollup-plugin-ultra-ganymede-vega
FLAT-0JR62 (MAL-2025-139496)
Use of software with malware In apollo-blaze-rate-limiter-vega
5.2
Medium
Ecosystem: Npm
Package: apollo-blaze-rate-limiter-vega
FLAT-0ZP3F (MAL-2025-139622)
Use of software with malware In async-centauri-sirius-vega
5.2
Medium
Ecosystem: Npm
Package: async-centauri-sirius-vega
FLAT-1F1NS (MAL-2025-140394)
Use of software with malware In capella-phoebe-vega-release-it
5.2
Medium
Ecosystem: Npm
Package: capella-phoebe-vega-release-it
FLAT-1NRXL (MAL-2025-148846)
Use of software with malware In typeorm-gridsome-vega-writable
5.2
Medium
Ecosystem: Npm
Package: typeorm-gridsome-vega-writable
FLAT-21DE6 (MAL-2025-140631)
Use of software with malware In chakra-ui-vega-express-soap
5.2
Medium
Ecosystem: Npm
Package: chakra-ui-vega-express-soap
FLAT-2ATD0 (MAL-2025-139703)
Use of software with malware In aurora-package-concurrently-vega
5.2
Medium
Ecosystem: Npm
Package: aurora-package-concurrently-vega
FLAT-2H9LN (MAL-2025-145153)
Use of software with malware In mongoose-heka-vega-sequelize
5.2
Medium
Ecosystem: Npm
Package: mongoose-heka-vega-sequelize
FLAT-2HE87 (MAL-2025-141740)
Use of software with malware In dotenv-parse-variables-yonder-readable-vega
5.2
Medium
Ecosystem: Npm
Package: dotenv-parse-variables-yonder-readable-vega
FLAT-2IW8D (MAL-2025-149087)
Use of software with malware In vega-css-loader-json-mensa
5.2
Medium
Ecosystem: Npm
Package: vega-css-loader-json-mensa
FLAT-2J488 (MAL-2025-149092)
Use of software with malware In vega-jest-leda-kinetic
5.2
Medium
Ecosystem: Npm
Package: vega-jest-leda-kinetic
FLAT-2XUID (MAL-2025-145208)
Use of software with malware In mui-prettier-stylelint-vega-octans
5.2
Medium
Ecosystem: Npm
Package: mui-prettier-stylelint-vega-octans
FLAT-3DSKP (MAL-2025-139638)
Use of software with malware In async-vega-jupiter-mensa
5.2
Medium
Ecosystem: Npm
Package: async-vega-jupiter-mensa
FLAT-3O8NO (MAL-2025-149101)
Use of software with malware In vega-xanthus-websockets-farout
5.2
Medium
Ecosystem: Npm
Package: vega-xanthus-websockets-farout
FLAT-3VH62 (MAL-2025-149095)
Use of software with malware In vega-nebula-gacrux-sqlite
5.2
Medium
Ecosystem: Npm
Package: vega-nebula-gacrux-sqlite
FLAT-4JZFS (MAL-2025-145142)
Use of software with malware In mongodb-vega-nova-weywot
5.2
Medium
Ecosystem: Npm
Package: mongodb-vega-nova-weywot
FLAT-5CTWL (MAL-2025-146525)
Use of software with malware In prettier-vega-semantic-ui-celeste
5.2
Medium
Ecosystem: Npm
Package: prettier-vega-semantic-ui-celeste
FLAT-5UPJY (MAL-2025-149100)
Use of software with malware In vega-websockets-xenos-webdriver-mocha
5.2
Medium
Ecosystem: Npm
Package: vega-websockets-xenos-webdriver-mocha
FLAT-5W8WM (MAL-2025-144495)
Use of software with malware In local-registry-vega-prettier-plugin-markdown
5.2
Medium
Ecosystem: Npm
Package: local-registry-vega-prettier-plugin-markdown
FLAT-64LH4 (MAL-2025-145630)
Use of software with malware In non-blocking-vega-jovian-csrf
5.2
Medium
Ecosystem: Npm
Package: non-blocking-vega-jovian-csrf
FLAT-66RBI (MAL-2025-147788)
Use of software with malware In sedna-promise-dotenv-parse-variables-vega
5.2
Medium
Ecosystem: Npm
Package: sedna-promise-dotenv-parse-variables-vega
FLAT-6KXUP (MAL-2025-143872)
Use of software with malware In jasmine-vega-mensa-draco
5.2
Medium
Ecosystem: Npm
Package: jasmine-vega-mensa-draco
FLAT-6T87S (MAL-2025-146518)
Use of software with malware In prettier-stylelint-semantic-release-concurrently-vega
5.2
Medium
Ecosystem: Npm
Package: prettier-stylelint-semantic-release-concurrently-vega
FLAT-6X652 (MAL-2025-148574)
Use of software with malware In test-meissa-node-config-vega
5.2
Medium
Ecosystem: Npm
Package: test-meissa-node-config-vega
FLAT-7BM7V (MAL-2025-149093)
Use of software with malware In vega-library-schema-parcel
5.2
Medium
Ecosystem: Npm
Package: vega-library-schema-parcel
FLAT-7P117 (MAL-2025-146299)
Use of software with malware In pm2-halley-vega-eclipse
5.2
Medium
Ecosystem: Npm
Package: pm2-halley-vega-eclipse
FLAT-836RL (MAL-2025-149173)
Use of software with malware In virgo-vega-zephyr-firebase
5.2
Medium
Ecosystem: Npm
Package: virgo-vega-zephyr-firebase
FLAT-8K028 (MAL-2025-149091)
Use of software with malware In vega-io-prettier-stylelint-development
5.2
Medium
Ecosystem: Npm
Package: vega-io-prettier-stylelint-development
FLAT-HIGP0 (MAL-2025-149085)
Use of software with malware In vega-callisto-apex-cygnus
5.2
Medium
Ecosystem: Npm
Package: vega-callisto-apex-cygnus
FLAT-HVGAK (MAL-2025-139446)
Use of software with malware In antares-vega-electron-achernar
5.2
Medium
Ecosystem: Npm
Package: antares-vega-electron-achernar
FLAT-I2SAB (MAL-2025-145876)
Use of software with malware In ora-altair-vega-selenium
5.2
Medium
Ecosystem: Npm
Package: ora-altair-vega-selenium
FLAT-I5EM9 (MAL-2025-148146)
Use of software with malware In spectron-webdriver-winston-vega-venus
5.2
Medium
Ecosystem: Npm
Package: spectron-webdriver-winston-vega-venus
FLAT-IVG52 (MAL-2025-145495)
Use of software with malware In nightwatch-vega-pm2-magellan
5.2
Medium
Ecosystem: Npm
Package: nightwatch-vega-pm2-magellan
FLAT-JC2OV (MAL-2025-139582)
Use of software with malware In ariel-cluster-yaml-vega
5.2
Medium
Ecosystem: Npm
Package: ariel-cluster-yaml-vega
FLAT-KVSDC (MAL-2025-143130)
Use of software with malware In halley-auth-vega-eslint-plugin
5.2
Medium
Ecosystem: Npm
Package: halley-auth-vega-eslint-plugin
FLAT-LGXIR (MAL-2025-146820)
Use of software with malware In publish-vega-spawn-enceladus
5.2
Medium
Ecosystem: Npm
Package: publish-vega-spawn-enceladus
FLAT-LTX85 (MAL-2025-146421)
Use of software with malware In postcss-relay-chromedriver-vega
5.2
Medium
Ecosystem: Npm
Package: postcss-relay-chromedriver-vega
FLAT-MGN3S (MAL-2025-145962)
Use of software with malware In parcel-luna-markdown-vega
5.2
Medium
Ecosystem: Npm
Package: parcel-luna-markdown-vega
FLAT-MPZ06 (MAL-2025-142428)
Use of software with malware In farout-vega-vulcan-rollup
5.2
Medium
Ecosystem: Npm
Package: farout-vega-vulcan-rollup
FLAT-NCQJU (MAL-2025-139733)
Use of software with malware In auth-venus-request-vega
5.2
Medium
Ecosystem: Npm
Package: auth-venus-request-vega
FLAT-NFV4B (MAL-2025-149097)
Use of software with malware In vega-redis-yonder-iota
5.2
Medium
Ecosystem: Npm
Package: vega-redis-yonder-iota
FLAT-NS33D (MAL-2025-149408)
Use of software with malware In webpack-supervisor-dotenv-vega
5.2
Medium
Ecosystem: Npm
Package: webpack-supervisor-dotenv-vega
FLAT-O1MYX (MAL-2025-140580)
Use of software with malware In ceres-vega-update-jovian
5.2
Medium
Ecosystem: Npm
Package: ceres-vega-update-jovian
FLAT-O25LR (MAL-2025-145660)
Use of software with malware In nova-json-terser-vega
5.2
Medium
Ecosystem: Npm
Package: nova-json-terser-vega
FLAT-P9VUI (MAL-2025-146489)
Use of software with malware In prettier-plugin-markdown-nashira-vega-elara
5.2
Medium
Ecosystem: Npm
Package: prettier-plugin-markdown-nashira-vega-elara
FLAT-PDDVO (MAL-2025-141521)
Use of software with malware In delphinus-jwt-vega-style-loader
5.2
Medium
Ecosystem: Npm
Package: delphinus-jwt-vega-style-loader
FLAT-PHVAC (MAL-2025-140925)
Use of software with malware In commitizen-cache-spawn-vega
5.2
Medium
Ecosystem: Npm
Package: commitizen-cache-spawn-vega
FLAT-Q0B5B (MAL-2025-148516)
Use of software with malware In terser-docusaurus-vega-metalsmith
5.2
Medium
Ecosystem: Npm
Package: terser-docusaurus-vega-metalsmith
FLAT-Q920V (MAL-2025-149084)
Use of software with malware In vega-bootstrap-barnard-hermes
5.2
Medium
Ecosystem: Npm
Package: vega-bootstrap-barnard-hermes