VDB
MAL-2026-10723
MAL-2026-10723
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Malicious code in @yeaft/webchat-agent (npm)
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| yeaft | webchat-agent | |
| yeaft | webchat-agent | 1.0.171, 1.0.199, 1.0.325 |
Timeline
- Jul 16, 2026 CVE Published
- Aug 6, 2026 CVE Updated
References
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.171 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.199 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.325 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.376 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.189 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.283 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.252 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.238 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.243 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.282 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.216 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.184 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.352 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.329 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.361 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.281 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.217 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.188 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.312 package
- https://www.npmjs.com/package/@yeaft/webchat-agent/v/1.0.350 package
…and 127 more