VulnerabilityPublished 25 Oct 2026

@capsense/ccx-welcome-page (npm) · Malicious Code

Affects @capsense/ccx-welcome-pageSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 25 Oct 2026, 22:41 UTC

What to do

Affected software

Product	Affected	Fixed in
npm@capsense/ccx-welcome-page	Affected =99.99.100	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid using version 99.99.100 of '@capsense/ccx-welcome-page'. Consider removing this package from projects or replacing it with a trusted alternative. Monitor vendor advisories for any updates or fixes.

Description

The npm package '@capsense/ccx-welcome-page' version 99.99.100 has been identified as malicious due to its communication with a domain linked to malicious activity. This behavior classifies the package as a security threat.

Impact

Use of this package version may expose systems to malicious network communications, potentially leading to compromise or data exfiltration. No confirmed exploitation in the wild is reported.

Summary

The OpenSSF Package Analysis project flagged the npm package '@capsense/ccx-welcome-page' at version 99.99.100 as malicious. The determination is based on the package's network communication with a domain known for malicious activity. No further technical details, such as exploit code or CVSS scoring, are provided.

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 25 Oct 2026, 22:41 UTC

Technical details

Community reviews