`cipher-base`

Ecosystem:
npm

Package URL:
pkg:npm/cipher-base

Total PRs:
70,453 Dependabot PRs

Latest PR:
3 days ago

Unique Repositories:
69,882 repositories

Unique Repos (30 days):
31 repositories

Security Advisories

cipher-base is missing type checks, leading to hash rewind and passing on crafted data

GHSA-cpq7-6gpm-g9rc CVE-2025-9287 CRITICAL published 10 months ago • updated 1 day ago

### Summary This affects e.g. `create-hash` (and `crypto-browserify`), so I'll describe the issue against that package Also affects `create-hmac` ...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): bump the npm_and_yarn group across 4 directories with 28 updates

OmniBlocks/monorepo #192

1.0.4 → 1.0.7 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 26 updates

LoLoSenPai/saintcosmoschain #1

1.0.4 → 1.0.7 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 16 updates

OpenZeppelin/openzeppelin-upgrades #1238

1.0.4 → 1.0.7 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 19 updates

enessari/taskforce #1

1.0.4 → 1.0.7 Patch PR

Closed about 2 months ago 1 comment

Bump cipher-base from 1.0.4 to 1.0.7

tz17012016/compnycards-frontend #5

1.0.4 → 1.0.7 Patch PR

Open about 2 months ago 1 comment

Bump cipher-base from 1.0.4 to 1.0.7

jayvicsanantonio/guides-source #4

1.0.4 → 1.0.7 Patch PR

Open about 2 months ago 1 comment

Bump cipher-base from 1.0.4 to 1.0.7

dennis61820/cocktail-example #7

1.0.4 → 1.0.7 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 17 updates

mkhraisha/essentials-of-blockchain-development-and-security #17

1.0.4 → 1.0.7 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 3 directories with 24 updates

Aremixdj/gitpod #46

1.0.4 → 1.0.7 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 23 updates

kyanha/kanka #11

1.0.4 → 1.0.7 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 32 updates

mohammadnajjar/blgom #8

1.0.4 → 1.0.7 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 17 updates

mkhraisha/essentials-of-blockchain-development-and-security #16

1.0.4 → 1.0.7 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 21 updates

Surfndez/walletlink #2

1.0.4 → 1.0.7 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 26 updates

hashim21223445/revert #15

1.0.4 → 1.0.7 Patch PR

Open about 2 months ago 3 comments

build(deps): bump the npm_and_yarn group across 7 directories with 23 updates

YoutacRandS-VA/truffle #16

1.0.4 → 1.0.7 Patch PR

Open about 2 months ago 2 comments

Bump the npm_and_yarn group across 2 directories with 23 updates

zalf-rdm/geonode #487

1.0.4 → 1.0.7 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 2 directories with 27 updates

nvrsummit/nixpkgs #1

1.0.4 → 1.0.7 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 6 directories with 23 updates

luislobo/yarn #4

1.0.3 → 1.0.7 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 16 updates

PEAC337/blockscout #11

1.0.4 → 1.0.7 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 19 directories with 25 updates

sumonst21/web3.js #34

1.0.4 → 1.0.7 Patch PR

Closed about 2 months ago 1 comment

chore: Bump the npm_and_yarn group across 1 directory with 27 updates

galadriel-ai/blockscout #23

1.0.4 → 1.0.7 Patch PR

Closed about 2 months ago 1 comment

Bump cipher-base from 1.0.4 to 1.0.7

alxmcr/old-weather-app #5

1.0.4 → 1.0.7 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 5 directories with 25 updates

Takuya-Miyazaki/WebTemplateStudio #40

1.0.4 → 1.0.7 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 16 updates

JoftheV/web3.js #16

1.0.4 → 1.0.7 Patch PR

Closed about 2 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 18 updates

joseguzman1337/gocrack-ui #13

1.0.4 → 1.0.7 Patch PR

Open about 2 months ago 2 comments

Bump the npm_and_yarn group across 13 directories with 13 updates

amillion-bank/vscode #17

1.0.4 → 1.0.7 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 7 directories with 23 updates

rtree/kekkAI #4

1.0.4 → 1.0.7 Patch PR

Open about 2 months ago 2 comments

Bump the npm_and_yarn group across 2 directories with 14 updates

Aky97567/crosslex #23

1.0.4 → 1.0.7 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 13 directories with 13 updates

amillion-bank/vscode #16

1.0.4 → 1.0.7 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 29 updates

dporkka/logseq #6

1.0.4 → 1.0.7 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump cipher-base from 1.0.4 to 1.0.7

Mifiel/xml-fiesta-js #86

1.0.4 → 1.0.7 Patch PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 13 directories with 13 updates

amillion-bank/vscode #15

1.0.4 → 1.0.7 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 33 updates

Heavy02011/arwes #2

1.0.4 → 1.0.7 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 20 updates

cf5146/PttChrome #12

1.0.4 → 1.0.7 Patch PR

Closed 2 months ago 3 comments

Bump the npm_and_yarn group across 5 directories with 29 updates

YoutacRandS-VA/parcel #13

1.0.4 → 1.0.7 Patch PR

Closed 2 months ago 4 comments

Bump the npm_and_yarn group across 2 directories with 29 updates

Rainbowjobs94/0 #14

1.0.4 → 1.0.7 Patch PR

Closed 2 months ago 2 comments

Bump the npm_and_yarn group across 2 directories with 17 updates

YoutacRandS-VA/web3.js #24

1.0.4 → 1.0.7 Patch PR

Open 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 19 updates

dporkka/saasify #1

1.0.4 → 1.0.7 Patch PR

Closed 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 26 updates

CaligraLtd/Ulauncher #2

1.0.4 → 1.0.7 Patch PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 26 updates

IsaacBell/react-stockcharts-examples2 #1

1.0.4 → 1.0.7 Patch PR

Open 2 months ago 3 comments

Bump the npm_and_yarn group across 1 directory with 31 updates

luislobo/buttercup-core #1

1.0.4 → 1.0.7 Patch PR

Open 2 months ago 2 comments

Bump the npm_and_yarn group across 2 directories with 9 updates

MetaMask/nft-dapp #22

1.0.4 → 1.0.7 Patch PR

Open 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 14 updates

UbuntuEvangelist/casino #2

1.0.4 → 1.0.7 Patch PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 23 updates

kyanha/kanka #7

1.0.4 → 1.0.7 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump cipher-base from 1.0.4 to 1.0.7

nikolas-eng/erc20faucet #9

1.0.4 → 1.0.7 Patch PR

Open 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 38 updates

nikolas-eng/defi-providers #1

1.0.4 → 1.0.7 Patch PR

Open 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 33 updates

QEDK/treasur #35

1.0.4 → 1.0.7 Patch PR

Open 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 15 updates

OpenZeppelin/openzeppelin-upgrades #1228

1.0.4 → 1.0.7 Patch PR

Closed 2 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 21 updates

seanclancy/universalviewer #10

1.0.4 → 1.0.7 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 15 updates

Emadalshamery/blockscout #7

1.0.4 → 1.0.7 Patch PR

Closed 2 months ago 2 comments

Package Details

Name:	`cipher-base`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/cipher-base`
JSON API:	View JSON

Security Advisories

1

Active advisories

CRITICAL 1

View All npm Advisories

Package Information

Description:

abstract base class for crypto-streams

Repository:	https://github.com/crypto-browserify/cipher-base
Homepage:	https://github.com/crypto-browserify/cipher-base#readme
Latest Release:	`1.0.6` over 1 year ago
Dependent Repos:	655,514
Dependent Packages:	387
Downloads:	57,342,893
Ranking:	Top 0.0456% by dependent repos Top 0.0395% by downloads Top 0.142% by dependent pkgs

PR Status

Open 68,464 (97.2%)

Merged 1,106 (1.6%)

Closed 883 (1.3%)

PR Types

Patch 70,452 (100.0%)