List of known vulnerabilities affecting the software package and the
components it embeds. Last refreshed on: 2025/11/05
CVSS Score
CVE
Name
Tags
failIncident: Malware
Scanned: 12 days ago
synckit
Perform async work synchronously in Node.js using `worker_threads` with first-class TypeScript support.
License: Permissive (MIT)
Published: 4 months ago
SAFE Assessment
Compliance
Licenses
No license compliance issues
Secrets
No sensitive information found
Security
Vulnerabilities
2 severe vulnerabilities exploited
Hardening
2 low priority mitigations absent
Threats
Tampering
1 malware-like behaviors found
Malware
3 supply chain attack artifacts
IMPORTANT: This package had 1 malicious incident in the last 2 years
INCIDENTS FOR THIS VERSION:
malware
malware
malware
malware
Learn more about malware detection
removal