0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
robomerge
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting robomerge, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-6729 | Unknown | Malicious code in robomerge (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (7b8f632bbc34b020f78b4dec06ddf1bc50194ce117dfe609484d05edc76d7790) package.json declares a preinstall lifecycle script that fires automatically on npm install. The script collects installer hostname, username, cwd, platform, arch, node version, npm user-agent, and CI identifiers (HORDE, GitHub Actions, Jenkins, TeamCity), then iterates process.env and selects up to 30 entries whose keys match credential-shaped regexes (AWS_, GITHUB_, GH_, NPM_, EPIC_, UE_, HORDE_, P4, CI, BUILD, TOKEN, KEY, SECRET), includ |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (7b8f632bbc34b020f78b4dec06ddf1bc50194ce117dfe609484d05edc76d7790) package.json declares a preinstall lifecycle script that fires automatically on npm install. The script collects installer hostname, username, cwd, platform, arch, node version, npm user-agent, and CI identifiers (HORDE, GitHub Actions, Jenkins, TeamCity), then iterates process.env and selects up to 30 entries whose keys match credential-shaped regexes (AWS_, GITHUB_, GH_, NPM_, EPIC_, UE_, HORDE_, P4, CI, BUILD, TOKEN, KEY, SECRET), includ