npm6 critical
extend
25 known vulnerabilities · 6 critical · 4 high
MAL-2022-6138
Malicious code in sjcl-extended (npm)
Published Jun 20, 2022
CVE-2023-26158HIGH
mockjs vulnerable to Prototype Pollution via the Util.extend function
Published Dec 8, 2023
MAL-2026-2929
Malicious code in path-extend (npm)
Published Apr 14, 2026
MAL-2025-258
Malicious code in vuepress-reading-time-extended (npm)
Published Jan 20, 2025
MAL-2026-584
Malicious code in chai-as-extended (npm)
Published Jan 28, 2026
MAL-2022-6177
Malicious code in smc-extendsession (npm)
Published Jun 20, 2022
MAL-2025-192743
Malicious code in dotenv-extend (npm)
Published Dec 23, 2025
MAL-2025-192825
Malicious code in no-use-extend-native (npm)
Published Dec 23, 2025
MAL-2025-190734
Malicious code in @ensdomains/hardhat-toolbox-viem-extended (npm)
Published Nov 24, 2025
MAL-2022-2937
Malicious code in extendshall4w (npm)
Published Aug 19, 2022
MAL-2026-2920
Malicious code in buffer-util-extend (npm)
Published Apr 14, 2026
MAL-2022-5617
Malicious code in rdeepgextend (npm)
Published Aug 19, 2022
MAL-2025-266
Malicious code in extendmine (npm)
Published Jan 21, 2025
MAL-2026-240
Malicious code in extended-path (npm)
Published Jan 13, 2026
MAL-2026-2363
Malicious code in env-extend (npm)
Published Mar 24, 2026
Check your entire dependency tree at onceRun dependency scan →