Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/notevil@0.1.0
purl pkg:npm/notevil@0.1.0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-q3p1-wc9c-37cp
Aliases:
CVE-2021-23771
GHSA-8g4m-cjm2-96wq
Sandbox escape in notevil and argencoders-notevil There are no reported fixed by versions.
VCID-v7rs-8wf6-bye7
Aliases:
GHSA-7r5f-7qr4-pf6q
GMS-2020-410
Sandbox Breakout / Arbitrary Code Execution in notevil
1.3.2
Affected by 2 other vulnerabilities.
VCID-vw7s-p2hq-mua1
Aliases:
GHSA-9gxr-rhx6-4jgv
GMS-2020-411
Sandbox Breakout / Prototype Pollution in notevil
1.3.3
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-13T16:43:30.013764+00:00 GitLab Importer Affected by VCID-vw7s-p2hq-mua1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/notevil/GMS-2020-411.yml 38.6.0
2026-06-13T16:43:11.593828+00:00 GitLab Importer Affected by VCID-v7rs-8wf6-bye7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/notevil/GMS-2020-410.yml 38.6.0
2026-06-12T18:02:44.977328+00:00 GitLab Importer Affected by VCID-q3p1-wc9c-37cp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/notevil/CVE-2021-23771.yml 38.6.0