GCVE-110-NPM-2026-033239

Advisory Published

Vulnetix · Advisory published July 21, 2026

[P-CRYPTO-WALLET] Cryptocurrency wallet address (Monero/Bitcoin/Ethereum) — matched: module.exports = "AGFzbQEAAAABMAhgAX8Bf2ADf39/AX9gBH9/f38Bf2AAAGADf39/AGABfwBgAn9/AGAGf39/f39/AALLAQgDZW52GHdhc21fb25faGVhZGVyc19jb21wbGV0ZQACA2VudhV3YXNtX29uX21lc3NhZ2VfYmVnaW4AAANlbnYLd2FzbV9vbl91cmwAAQNlbnYOd2FzbV9vbl9zdGF0dXMAAQNlbnYUd2FzbV9vbl9oZWFkZXJfZmllbGQAAQNlbnYUd2FzbV9vbl9oZWFkZXJfdmFsdW

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious CodeCWE-522Insufficiently Protected Credentials

Affected Products

Vendor	Product	Versions	Platforms
npm	pullfrog	* (affected)	—

References

advisory

web

Browse GCVE Records

67,345 records in the GCVE database · Updated August 10, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON