Vulnerability MAL-2026-18252
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
5 days ago
October 25, 2026 at 06:26 AM UTC
Malicious code in @eforms/forms-api (npm)
0.0.0-stage and 1.99.0 - 2.0.0-SNAPSHOT and 2.0.99 and 2.99.0 - 2.99.1 and 99.0.0
0.0.0-stage and 1.99.0 - 2.0.0-SNAPSHOT and 2.0.99 and 2.99.0 - 2.99.1 and 99.0.0
Summary
Malicious code in @eforms/forms-api (npm)
Details
Impacted packages
Timeline
Published
5 days ago
October 25, 2026 at 06:26 AM UTC
Last Modified
1 day ago
October 29, 2026 at 02:30 PM UTC