GCVE-110-NPM-2026-034939

Advisory Published

Vulnetix · Advisory published October 13, 2026

[P-EVAL-BASE64] Base64-decoded payload executed via eval — matched: module.exports=[444237,e=>{"use strict";let t=Object.freeze({status:"aborted"});function i(e,t,i){function n(i,n){if(i._zod||Object.defineProperty(i,"_zod",{value:{def:n,constr:o,traits:new Set},enumerable:!1}),i._zod.traits.has(e))return;i._zod.traits.add(e),t(i,n);let r=o.prototype,a=Object.keys(r

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Affected Products

Vendor	Product	Versions	Platforms
npm	purplemux-improved	0.5.2 (affected)	—

References

advisory

web

Browse GCVE Records

3,167 records in the GCVE database · Updated October 13, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON