OsVault/npm/steal
npm5 critical

steal

14 known vulnerabilities · 5 critical · 3 high

CVE-2022-37262HIGH

steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments

Published Sep 16, 2022
CVE-2022-37257CRITICAL

steal vulnerable to Prototype Pollution via requestedVersion variable

Published Sep 16, 2022
CVE-2022-37260HIGH

steal vulnerable to Regular Expression Denial of Service via input variable

Published Sep 16, 2022
CVE-2022-37265CRITICAL

steal vulnerable to Prototype Pollution via alias variable

Published Sep 21, 2022
CVE-2022-37264CRITICAL

steal vulnerable to Prototype Pollution via optionName variable

Published Sep 16, 2022
CVE-2022-37259HIGH

steal Inefficient Regular Expression Complexity vulnerability via string variable

Published Sep 21, 2022
CVE-2022-37258CRITICAL

steal vulnerable to Prototype Pollution

Published Sep 17, 2022
CVE-2022-37266CRITICAL

steal vulnerable to Prototype Pollution via key variable in babel.js

Published Sep 16, 2022
MAL-2026-3167

Malicious code in apple-infra-stealth-audit (npm)

Published Apr 29, 2026
MAL-2025-192798

Malicious code in flagstealer (npm)

Published Dec 23, 2025
MAL-2025-192629

Malicious code in flagstealerfinal (npm)

Published Dec 19, 2025
MAL-2024-10347

Malicious code in puppeteerpluginstealth (npm)

Published Nov 4, 2024
MAL-2024-10341

Malicious code in puppeteer-extra-stealth (npm)

Published Nov 4, 2024
MAL-2026-1476

Malicious code in jalalstealer (npm)

Published Mar 16, 2026
Check your entire dependency tree at onceRun dependency scan →