Npm — PoC Archivehttps://poc.intelseclab.com/tags/npm/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000safe-expr-eval: Mitigation Library for the expr-eval Unsafe eval() RCE (CVE-2025-12735)https://poc.intelseclab.com/pocs/misc/2026-07-06_cve-2025-12735-safe-expr-eval-mitigation/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-06_cve-2025-12735-safe-expr-eval-mitigation/Critical severity (CVSS 9.8) — misc · CVE-2025-12735. Status: Patched. Affects: expr-eval npm package (mathematical/logical expression evaluator). Tags: expr-eval, eval-injection, arbitrary-code-execution, rce, cwe-95, javascript, typescript, npm, expression-parser, mitigation-library, drop-in-replacement.miscCriticalexpr-evaleval-injectionarbitrary-code-executionrcecwe-95javascripttypescriptnpmexpression-parsermitigation-librarydrop-in-replacementnpm `tar` Package Unicode-Normalization Race Condition / File Collision (CVE-2026-2395)https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-2395-tar-race-condition/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-2395-tar-race-condition/Medium severity — misc · CVE-2026-2395. Status: PoC. Affects: tar npm package. Tags: tar, nodejs, npm, race-condition, unicode-normalization, file-collision, archive-extraction, data-corruption.miscMediumtarnodejsnpmrace-conditionunicode-normalizationfile-collisionarchive-extractiondata-corruption