MAL-2026-5717 — Vulnetix

MAL-2026-5717 PUBLISHED CVSS 9.300000190734863 CRITICAL

Malicious code in claudechor (npm)

Risk Scores

CVSS 4.0

9.300000190734863

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
npm	claudechor	1.0.1, 1.0.3, 1.0.4
npm	claudechor

Timeline

Jun 12, 2026 CVE Published
Jun 12, 2026 CVE Updated

References

https://www.npmjs.com/package/claudechor/v/1.0.5 package
https://www.npmjs.com/package/claudechor/v/1.0.1 package
https://www.npmjs.com/package/claudechor/v/1.0.2 package
https://www.npmjs.com/package/claudechor/v/1.0.3 package
https://www.npmjs.com/package/claudechor/v/1.0.4 package

Open in Interactive Console →

$ Console Community · 100/wk Open console ›