steal

v2.3.0npm· JavaScript

Gets JavaScript.

The verdict

Has 8 high-severity advisories. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityUnknown

Security8 advisories

LicenseUnknown

DepsHeavy

Maintenance

Last published 3 years ago.

Popularity

Download count unavailable.

Security

8 known advisories (worst: high severity).

License

No license declared.

Dependencies

19 direct dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments
GHSA-28v4-jf82-jvj8 Published 2022-09-16
HIGH
steal vulnerable to Regular Expression Denial of Service via input variable
GHSA-7f3x-2wcx-hww8 Published 2022-09-16
HIGH
steal vulnerable to Prototype Pollution via optionName variable
GHSA-8f8g-9j73-7p82 Published 2022-09-16
HIGH
steal vulnerable to Prototype Pollution via requestedVersion variable
GHSA-93q5-3xpc-8vg3 Published 2022-09-16
HIGH
steal vulnerable to Prototype Pollution
GHSA-gvjw-8mmr-8f6g Published 2022-09-17
HIGH
steal Inefficient Regular Expression Complexity vulnerability via string variable
GHSA-rgqx-226f-2xp4 Published 2022-09-21
HIGH
steal vulnerable to Prototype Pollution via key variable in babel.js
GHSA-vwhq-pm3r-fjm9 Published 2022-09-16
HIGH
steal vulnerable to Prototype Pollution via alias variable
GHSA-wc4x-qmr2-rj8h Published 2022-09-21

Recent releases