node-is-arrayish vulnerabilities

1 known vulnerability in node-is-arrayish from Qix-. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  node-is-arrayish: Embedded Malicious Code

  CVE-2025-59331Sep 15, 2025Qix-

  is-arrayish checks if an object can be used like an Array. On 8 September 2025, an npm publishing account for is-arrayish was taken over after a phishing attack. Version 0.3.3 was published, functionally identical to the previous patch version, but with a malw