0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
parket-flow
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting parket-flow, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-6334 | Unknown | Malicious code in parket-flow (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (8e9b185a1b54e41a8fb900a67aab43dbb78abc4fea96e9ca05d356f6864e3bdd) index.js imports child_process and invokes execSync with bash and zsh shells (index.js line 1, 301, 317). Without traced execution context it is not possible to determine whether these shell invocations are part of legitimate tool functionality or whether they fetch and execute attacker-controlled content. No corroborating evidence of exfiltration, credential access, network beacons, or attacker-controlled endpoints is present in what was i |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (8e9b185a1b54e41a8fb900a67aab43dbb78abc4fea96e9ca05d356f6864e3bdd) index.js imports child_process and invokes execSync with bash and zsh shells (index.js line 1, 301, 317). Without traced execution context it is not possible to determine whether these shell invocations are part of legitimate tool functionality or whether they fetch and execute attacker-controlled content. No corroborating evidence of exfiltration, credential access, network beacons, or attacker-controlled endpoints is present in what was i