0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
ts-opus
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting ts-opus, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-6468 | Unknown | Malicious code in ts-opus (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (73b0105b34723dd6e1449c3353d1d4df0dcf94ae460a4dfd156566bb4ba372c7) ts-opus 0.0.8 ships an unmodified copy of MikeMcl/big.js (README, copyright, and repository URL all reference big.js) but injects an additional top-level block inside both big.js and big.mjs that calls `require('node-slot')` and invokes `doc.from_str()`, with both the synchronous error and the returned promise's rejection silently swallowed (`try {....then(e=>{}).catch(e=>{}) } catch(error){}`). The required module name `node-slot` is not d |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (73b0105b34723dd6e1449c3353d1d4df0dcf94ae460a4dfd156566bb4ba372c7) ts-opus 0.0.8 ships an unmodified copy of MikeMcl/big.js (README, copyright, and repository URL all reference big.js) but injects an additional top-level block inside both big.js and big.mjs that calls `require('node-slot')` and invokes `doc.from_str()`, with both the synchronous error and the returned promise's rejection silently swallowed (`try {....then(e=>{}).catch(e=>{}) } catch(error){}`). The required module name `node-slot` is not d