Skip to main content
VulnerabilityPublished Updated

@ably-forks/crypto-js (npm) · Malicious Code

Affects @ably-forks/crypto-jsSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 8 Sep 2026, 03:38 UTC

What to do

Affected software

ProductAffectedFixed in
npm@ably-forks/crypto-jspkg:npm/%40ably-forks/crypto-jsOther threatsAffected
  • =3.999.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid using version 3.999.0 of @ably-forks/crypto-js and remove it from their dependencies if present. Monitor official advisories for updates or fixes.

Description

The npm package @ably-forks/crypto-js version 3.999.0 contains malicious code. This is identified as a malicious package threat rather than a traditional software vulnerability. There is no CVSS score or detailed technical exploit information available. No patch or remediation guidance is provided in the source data.

References

Community reviews

Loading reviews…