MAL-2025-192676 Malicious code in zebracros-bahlil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1584c60176e7489fa7d40f80dd373fc228d0cb39052fb1e6b5e638f955d229 The package zebracros-bahlil was found to contain malicious code. Source: ghsa-malware c31864656b362790c68a366d8374f2f6ab6b6d8ddf9c04f49cca4eceee2a9e...

MAL-2025-192662 Malicious code in adeliana-xnetgpt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f83c4bf47eb41e57e89cb19f6d28796be0fbc39ff598db3ae6f04d87500fb7a The package adeliana-xnetgpt was found to contain malicious code. Source: ghsa-malware 780aa557a66927e031b481d2f7add1e807605370d094563885c82f533a7ab7...

Malicious code in zebracros-bahlil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1584c60176e7489fa7d40f80dd373fc228d0cb39052fb1e6b5e638f955d229 The package zebracros-bahlil was found to contain malicious code. Source: ghsa-malware c31864656b362790c68a366d8374f2f6ab6b6d8ddf9c04f49cca4eceee2a9e...

Malicious code in sonia3-npm-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 339534853ebcb623a903a0515ab9ae854edaac8fdfec58d3edb454c501238d19 The package sonia3-npm-js was found to contain malicious code. Source: ghsa-malware 3b951ad6a6c46f78a032c0c93db496b6b13cfadccf178f195cd6c3f28531ed1e...

Malicious code in asdfgh33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59190dcd898218c2925fdb51e3fe1090cb928c4bd0de218b403c0f25469ff083 The package asdfgh33 was found to contain malicious code. Source: ghsa-malware 15c01c114a3291d28b718c3328ddd213e72bb0ee0976ef40070061e41f1c3e3f Any...

Malicious code in ahmed_salem_o (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ccf3722bcf6828ca9cc9ed0f332cb3778d8a8be73146f96edb1d381a4649f54 The package ahmedsalemo was found to contain malicious code. Source: ghsa-malware dcde03f9a78b367c9044b92cfac2900e588491df6c7894a65c4b2658e26c7e65 An...

MAL-2025-192663 Malicious code in ahmed_salem_o (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ccf3722bcf6828ca9cc9ed0f332cb3778d8a8be73146f96edb1d381a4649f54 The package ahmedsalemo was found to contain malicious code. Source: ghsa-malware dcde03f9a78b367c9044b92cfac2900e588491df6c7894a65c4b2658e26c7e65 An...

Malicious code in ctfvamp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60afd58ec7b3c88e49140c847bac2c30a9e0e6d9f4f700125d59a3302bb9dac2 The package ctfvamp was found to contain malicious code. Source: ghsa-malware 813e410e18d7609781e8b8a67e5750a2e2652e69245b8a6d343d9ea8364d75a6 Any...

Malicious Package

Overview ctfvampir is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in baidu-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421c0014ea5fca29effc2b5cc0a04d984b9c2d557496c3ae31a5724ab6337417 The package baidu-tester was found to contain malicious code. Source: ghsa-malware e3d13abe3b7037aa5d2906857e05ea0f19837a22cf3563951cf23717228d15b2 A...

EUVD-2025-204524

Apache NiFi GetAsanaObject Processor has Remote Code Execution via Unsafe Deserialization...

Apache NiFi GetAsanaObject Processor has Remote Code Execution via Unsafe Deserialization

Apache NiFi 1.20.0 through 2.6.0 include the GetAsanaObject Processor, which requires integration with a configurable Distribute Map Cache Client Service for storing and retrieving state information. The GetAsanaObject Processor used generic Java Object serialization and deserialization without...

CVE-2025-66524

The vulnerability concerns Apache NiFi GetAsanaObject Processor (NiFi 1.20.0–2.6.0) which uses unfiltered Java Object serialization/deserialization with a Distribute Map Cache Client Service for state. The root cause is unsafe deserialization of crafted state data stored in the configured cache s...

CVE-2025-66524 Apache NiFi: Deserialization of Untrusted Data in GetAsanaObject Processor

Apache NiFi 1.20.0 through 2.6.0 include the GetAsanaObject Processor, which requires integration with a configurable Distribute Map Cache Client Service for storing and retrieving state information. The GetAsanaObject Processor used generic Java Object serialization and deserialization without...

Malicious code in chai-as-awaited (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e469d359c2a3a5ca20b47691e64d2330d38d9ad0f173fb440b2ac677d333d6a The package chai-as-awaited was found to contain malicious code. Source: ghsa-malware df0ec4507c7a16056091fbf705d97408c308041bf9b5798d113fdc3042a00b3...

MAL-2025-192622 Malicious code in chai-as-awaited (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e469d359c2a3a5ca20b47691e64d2330d38d9ad0f173fb440b2ac677d333d6a The package chai-as-awaited was found to contain malicious code. Source: ghsa-malware df0ec4507c7a16056091fbf705d97408c308041bf9b5798d113fdc3042a00b3...

MAL-2025-192628 Malicious code in elf-stats-wintry-chimney-348 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ca968ff9d74512694f4175979de59da80fad3394cebfb3f6c09f6900309a2a The package elf-stats-wintry-chimney-348 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192626 Malicious code in elf-stats-cocoa-workshop-459 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362f3da17da5b5a6cbb8124715f6d31867664acc26b4bbbe8537ba02c9dc9677 The package elf-stats-cocoa-workshop-459 was found to contain malicious code. Source: ghsa-malware...

Malicious code in yt-smm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3641ecf42237a55c9fb81c4368aa7b83a42d2110a64a733f45d27005cf38dc26 The package yt-smm was found to contain malicious code. Source: ghsa-malware b4d96978cd4e109ed8b360f551af24fd1621dd659f63a490c9de077b587f607b Any...

Malicious code in vdous (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287389231a3c89843cda42ba76c0357e0f1e933cd479a9e12621a250e7014980 The package vdous was found to contain malicious code. Source: ghsa-malware db289bbb4a097deab7e11457a14affb9e2579bda9632d94fba4110f60b48ae63 Any...