MAL-2026-10160Published
Malicious code in rollup-packages-polyfill-core (npm)
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
osv · MAL-2026-10160
- https://www.npmjs.com/package/rollup-packages-polyfill-core/v/0.13.8
- https://www.npmjs.com/package/rollup-packages-polyfill-core/v/0.13.7
- https://www.npmjs.com/package/rollup-packages-polyfill-core/v/0.14.1
- https://www.npmjs.com/package/rollup-packages-polyfill-core/v/0.13.9
- https://www.npmjs.com/package/rollup-packages-polyfill-core/v/0.14.0
- https://github.com/advisories/GHSA-vw6c-rv4h-v5pw
- https://www.npmjs.com/package/rollup-packages-polyfill-core/v/0.13.5
- https://www.npmjs.com/package/rollup-packages-polyfill-core/v/0.13.6
- https://www.npmjs.com/package/rollup-packages-polyfill-core/v/0.13.4
- https://research.jfrog.com/post/rollup-polyfill-masquerading
- https://github.com/advisories/GHSA-pvcw-374v-r92p
- https://security.snyk.io/vuln/SNYK-JS-WAGNIBOTPOLYGON-18505277
Related changes
Linked by CVE identifierNo related changes are available here.