`cipher-base`

Ecosystem:
npm

Package URL:
pkg:npm/cipher-base

Total PRs:
70,203 Dependabot PRs

Latest PR:
about 4 hours ago

Unique Repositories:
69,722 repositories

Unique Repos (30 days):
105 repositories

Security Advisories

cipher-base is missing type checks, leading to hash rewind and passing on crafted data

GHSA-cpq7-6gpm-g9rc CVE-2025-9287 CRITICAL published 6 months ago • updated about 15 hours ago

### Summary This affects e.g. `create-hash` (and `crypto-browserify`), so I'll describe the issue against that package Also affects `create-hmac` ...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): bump the npm_and_yarn group across 4 directories with 29 updates

AKJUS/swc #484

1.0.4 → 1.0.7 Patch PR

Open about 4 hours ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 28 updates

AKJUS/swc #483

1.0.4 → 1.0.7 Patch PR

Open about 6 hours ago 2 comments

chore(deps): bump the npm_and_yarn group across 11 directories with 16 updates

Dargon789/codesandbox-client #90

1.0.4 → 1.0.7 Patch PR

Open about 6 hours ago 2 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 34 updates

CxsLucyfer/metastream #24

1.0.4 → 1.0.7 Patch PR

Closed about 7 hours ago 1 comment

chore(deps): bump the npm_and_yarn group across 9 directories with 31 updates

cptthura-alt/codesandbox-client #6

1.0.4 → 1.0.7 Patch PR

Closed about 8 hours ago 1 comment

chore(deps): bump the npm_and_yarn group across 10 directories with 17 updates

ivan09069/codesandbox-client #78

1.0.4 → 1.0.7 Patch PR

Open about 8 hours ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 23 updates

MetaMask/metaplex #7

1.0.4 → 1.0.7 Patch PR

Open about 9 hours ago 2 comments

chore(deps): Bump the npm_and_yarn group across 13 directories with 18 updates

Accordingtomark/BotFramework-Composer #11

1.0.4 → 1.0.7 Patch PR

Closed about 9 hours ago 1 comment

Bump the npm_and_yarn group across 2 directories with 26 updates

serinuntius/tokenized-url #7

1.0.4 → 1.0.7 Patch PR

Open about 16 hours ago 1 comment

Bump the npm_and_yarn group across 2 directories with 23 updates

JoftheV/web3.js #4

1.0.4 → 1.0.7 Patch PR

Open about 18 hours ago 1 comment

Bump the npm_and_yarn group across 3 directories with 13 updates

GAEAlimited/gsc20-protocol #54

1.0.4 → 1.0.7 Patch PR

Open about 18 hours ago 1 comment

chore(deps): bump the npm_and_yarn group across 10 directories with 18 updates

ivan09069/codesandbox-client #77

1.0.4 → 1.0.7 Patch PR

Open about 20 hours ago 2 comments

Bump the npm_and_yarn group across 2 directories with 11 updates

OpenZeppelin/openzeppelin-upgrades #1213

1.0.4 → 1.0.7 Patch PR

Open 1 day ago 3 comments

Bump the npm_and_yarn group across 2 directories with 23 updates

kimjy925/hunt-town #11

1.0.4 → 1.0.7 Patch PR

Closed 1 day ago 1 comment

Bump the npm_and_yarn group across 1 directory with 26 updates

sizzlebop/web-uikit #3

1.0.4 → 1.0.7 Patch PR

Closed 1 day ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 24 updates

alfonsodg/Viewers #2

1.0.4 → 1.0.7 Patch PR

Closed 1 day ago 1 comment

chore: Bump the npm_and_yarn group across 1 directory with 18 updates

YoutacRandS-VA/blockscout #7

1.0.4 → 1.0.7 Patch PR

Open 1 day ago 1 comment

Bump the npm_and_yarn group across 2 directories with 24 updates

JoftheV/web3.js #3

1.0.4 → 1.0.7 Patch PR

Open 1 day ago 1 comment

build(deps): bump the npm_and_yarn group across 3 directories with 26 updates

JounQin/glint #2

1.0.4 → 1.0.7 Patch PR

Open 1 day ago 2 comments

Build(deps): Bump cipher-base from 1.0.4 to 1.0.7 in /angular-legacy

AKJUS/redbox-portal #44

1.0.4 → 1.0.7 Patch PR

Open 1 day ago 1 comment

build(deps): bump the npm_and_yarn group across 7 directories with 32 updates

sumonst21/amplify-cli #13

1.0.4 → 1.0.7 Patch PR

Closed 1 day ago 1 comment

Bump the npm_and_yarn group across 1 directory with 24 updates

Roseymr/account-viewer-v2 #20

1.0.4 → 1.0.7 Patch PR

Open 1 day ago 3 comments

Bump the npm_and_yarn group across 2 directories with 16 updates

opensupplyhub/open-supply-hub #886

1.0.4 → 1.0.7 Patch PR

Open 1 day ago 1 comment

Bump the npm_and_yarn group across 1 directory with 10 updates

OpenZeppelin/openzeppelin-upgrades #1212

1.0.4 → 1.0.7 Patch PR

Closed 1 day ago 2 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 32 updates

AKJUS/blockchain-wallet-v4-frontend #64

1.0.4 → 1.0.7 Patch PR

Open 1 day ago 1 comment

build(deps-dev): bump cipher-base from 1.0.4 to 1.0.7 in /public/icon-fonts/boxicons

chrisvaldes/Ariane_portfolio #17

1.0.4 → 1.0.7 Patch PR

Open 1 day ago 1 comment

Bump the npm_and_yarn group across 2 directories with 18 updates

AKJUS/TypeScript #2

1.0.4 → 1.0.7 Patch PR

Open 2 days ago 1 comment

Bump cipher-base from 1.0.4 to 1.0.7 in /web-app/frontend

AKJUS/HoverX-Smart-Search-And-Rescue-Drone #9

1.0.4 → 1.0.7 Patch PR

Open 2 days ago 1 comment

Bump the npm_and_yarn group across 4 directories with 15 updates

Dargon789/hardhat-project #1975

1.0.4 → 1.0.7 Patch PR

Open 2 days ago 3 comments

Bump the npm_and_yarn group across 2 directories with 11 updates

AKJUS/liqu1tent #4

1.0.4 → 1.0.7 Patch PR

Open 2 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 11 directories with 14 updates

Dargon789/codesandbox-client #88

1.0.4 → 1.0.7 Patch PR

Closed 2 days ago 3 comments

Bump the npm_and_yarn group across 3 directories with 37 updates

AKJUS/Kryha-Carbon #7

1.0.4 → 1.0.7 Patch PR

Open 2 days ago 1 comment

Bump the npm_and_yarn group across 13 directories with 18 updates

JoftheV/helium-program-library #7

1.0.4 → 1.0.7 Patch PR

Closed 2 days ago 2 comments

chore(deps): Bump the npm_and_yarn group across 9 directories with 26 updates

ssushant0011/backstage-plugins-for-aws #3

1.0.4 → 1.0.7 Patch PR

Closed 2 days ago 1 comment

Bump the npm_and_yarn group across 4 directories with 29 updates

abrahem79/keplr-wallet #3

1.0.4 → 1.0.7 Patch PR

Open 2 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 28 updates

Rahull004/Notify #4

1.0.4 → 1.0.7 Patch PR

Open 2 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 9 updates

OpenZeppelin/openzeppelin-upgrades #1211

1.0.4 → 1.0.7 Patch PR

Open 3 days ago 2 comments

Bump the npm_and_yarn group across 5 directories with 26 updates

koo5/snowpack #4

1.0.4 → 1.0.7 Patch PR

Closed 3 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 10 directories with 19 updates

GlacierEQ/playwright-crx #4

1.0.4 → 1.0.7 Patch PR

Open 3 days ago 4 comments

Bump the npm_and_yarn group across 2 directories with 30 updates

CatalinCighi/web3.js #2

1.0.4 → 1.0.7 Patch PR

Closed 3 days ago 1 comment

build(deps): bump the npm_and_yarn group across 4 directories with 33 updates

GlacierEQ/node-sdk #19

1.0.4 → 1.0.7 Patch PR

Open 3 days ago 4 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 17 updates

AKJUS/create-hyperweb-app #15

1.0.4 → 1.0.7 Patch PR

Open 3 days ago 1 comment

Bump the npm_and_yarn group across 9 directories with 31 updates

darrenbritton/gatsby #3

1.0.4 → 1.0.7 Patch PR

Closed 3 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 19 directories with 17 updates

sumonst21/medusa #16

1.0.4 → 1.0.7 Patch PR

Closed 3 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 20 directories with 17 updates

WilsonLe/medusa #8

1.0.4 → 1.0.7 Patch PR

Closed 3 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 8 directories with 16 updates

ivan09069/codesandbox-client #74

1.0.4 → 1.0.7 Patch PR

Open 3 days ago 2 comments

Bump the npm_and_yarn group across 2 directories with 20 updates

YoutacRandS-VA/web3.js #13

1.0.4 → 1.0.7 Patch PR

Open 3 days ago 2 comments

Bump the npm_and_yarn group across 3 directories with 25 updates

mwampetaipyana/Blockchain-SecTool-for-Document-Authenticity #10

1.0.4 → 1.0.7 Patch PR

Open 3 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 15 updates

Dargon789/web3.js #52

1.0.4 → 1.0.7 Patch PR

Open 3 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 16 updates

adoresli/plus #3

1.0.4 → 1.0.7 Patch PR

Closed 3 days ago 1 comment

Package Details

Name:	`cipher-base`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/cipher-base`
JSON API:	View JSON

Security Advisories

1

Active advisories

CRITICAL 1

View All npm Advisories

Package Information

Description:

abstract base class for crypto-streams

Repository:	https://github.com/crypto-browserify/cipher-base
Homepage:	https://github.com/crypto-browserify/cipher-base#readme
Latest Release:	`1.0.6` about 1 year ago
Dependent Repos:	655,514
Dependent Packages:	387
Downloads:	57,342,893
Ranking:	Top 0.0456% by dependent repos Top 0.0395% by downloads Top 0.142% by dependent pkgs

PR Status

Open 68,384 (97.4%)

Merged 1,105 (1.6%)

Closed 714 (1.0%)

PR Types

Patch 70,202 (100.0%)