Colorjs vulnerabilities
We track 1 vulnerability in Colorjs products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2025.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Colorjs vulnerabilities
- 8.8 High severity
color-name: Embedded Malicious Code
color-name is a JSON with CSS color names. On 8 September 2025, an npm publishing account for color-name was taken over after a phishing attack. Version 2.0.1 was published, functionally identical to the previous patch version, but with a malware payload added