Most recent entries from all

EUVD-2026-252421

2026-10-08T10:06:24.729791+00:00

EUVD-2026-252421

fkie_cve-2025-59038

2026-10-08T10:06:24.729830+00:00

Prebid.js is a free and open source library for publishers to quickly implement header bidding. NPM users of prebid 10.9.2 may have been briefly compromised by a malware campaign. The malicious code attempts to redirect crypto transactions on the site to the attackers' wallet. Version 10.10.0 fixes the issue. As a workaround, it is also possible to downgrade to 10.9.1.

GHSA-jwq7-6j4r-2f92 — Prebid.js NPM package briefly compromised

2026-10-08T10:06:24.729873+00:00

Affected: npm: prebid.js

### Impact NPM users of prebid 10.9.2. The malicious code attempts to redirect crypto transactions on the site to the attackers' wallet.

### Patches 10.10.0 is solved

### References https://www.sonatype.com/blog/npm-chalk-and-debug-packages-hit-in-software-supply-chain-attack