MAL-2026-4699 — Vulnetix

MAL-2026-4699 PUBLISHED CVSS 8.600000381469727 HIGH

Malicious code in utils-mf (npm)

Risk Scores

CVSS 4.0

8.600000381469727

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
npm	utils-mf	11.2.5, 11.4.1, 11.2.6

Timeline

May 21, 2026 CVE Published
Jun 5, 2026 CVE Updated

References

https://www.npmjs.com/package/utils-mf/v/11.2.5 package
https://www.npmjs.com/package/utils-mf/v/11.4.1 package
https://www.npmjs.com/package/utils-mf/v/11.2.6 package
https://www.npmjs.com/package/utils-mf/v/11.2.4 package
https://github.com/advisories/GHSA-4c54-hwv9-c5xm advisory

Open in Interactive Console →

$ Console Community · 100/wk Open console ›