Debug-js vulnerabilities
We track 1 vulnerability in Debug-js products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2025.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Debug-js vulnerabilities
- 8.8 High severity
debug: Embedded Malicious Code
debug is a JavaScript debugging utility. On 8 September 2025, the npm publishing account for debug was taken over after a phishing attack. Version 4.4.2 was published, functionally identical to the previous patch version, but with a malware payload added attem