GCVE-110-NPM-2026-035203

Advisory Published

Vulnetix · Advisory published October 17, 2026

[P-EVAL-BASE64] Base64-decoded payload executed via eval — matched: export const BATCH_BOOK_APP_CLIENT_BUNDLE = "\"use strict\";(()=>{var Tc=Object.defineProperty;var rd=(t,r,n)=>r in t?Tc(t,r,{enumerable:!0,configurable:!0,writable:!0,value:n}):t[r]=n;var Pe=(t=>typeof require<\"u\"?require:typeof Proxy<\"u\"?new Proxy(t,{get:(r,n)=>(typeof require<\"u\"?require:r)

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious CodeCWE-200Exposure of Sensitive Information to an Unauthorized Actor

Affected Products

Vendor	Product	Versions	Platforms
npm	warp-agent-mcp	0.22.0 (affected)	—

References

advisory

web

Browse GCVE Records

4,929 records in the GCVE database · Updated October 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON