VDB

GCVE-110-NPM-2026-032905

GCVE-110-NPM-2026-032905
Advisory Published
Vulnetix · Advisory published July 11, 2026
[P-INSTALL-PIPE-SHELL] Download-and-execute in install script — matched: preinstall: which elide || curl -sSL --tlsv1.2 dl.elide.dev/cli/install.sh | bash -s - --install-dir=${npm_config_binroot:-./node_modules/.bin/} --no-banner --install-rev=$npm_package_config_elideVersion

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Affected Products

VendorProductVersionsPlatforms
npm@elide-dev/elide* (affected)

References

advisory
web
web

Browse GCVE Records

73,866 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›