MAL-2025-21901 Malicious code in graviton-dactyl-helmet-dotenv-parse-variables (npm)

The package graviton-dactyl-helmet-dotenv-parse-variables was found to contain malicious code...

MAL-2025-21338 Malicious code in geochronology-markdown-jupiter-dotenv-parse-variables (npm)

The package geochronology-markdown-jupiter-dotenv-parse-variables was found to contain malicious code...

MAL-2025-29302 Malicious code in pino-pretty-deneb-dotenv-parse-variables-hugo (npm)

The package pino-pretty-deneb-dotenv-parse-variables-hugo was found to contain malicious code...

MAL-2025-28877 Malicious code in parse-react-next (npm)

The package parse-react-next was found to contain malicious code...

MAL-2025-20569 Malicious code in finally-parse-star-tau-zero (npm)

The package finally-parse-star-tau-zero was found to contain malicious code...

MAL-2025-39308 Malicious code in wind-pipe-double-parse-static (npm)

The package wind-pipe-double-parse-static was found to contain malicious code...

MAL-2025-39001 Malicious code in webdriverio-nucleosynthesis-fork-dotenv-parse-variables (npm)

The package webdriverio-nucleosynthesis-fork-dotenv-parse-variables was found to contain malicious code...

MAL-2025-38051 Malicious code in validate-function-parse-execute-interface (npm)

The package validate-function-parse-execute-interface was found to contain malicious code...

MAL-2025-33440 Malicious code in small-debug-awk-hash-parse (npm)

The package small-debug-awk-hash-parse was found to contain malicious code...

MAL-2025-15806 Malicious code in blazar-non-blocking-dotenv-parse-variables-test (npm)

The package blazar-non-blocking-dotenv-parse-variables-test was found to contain malicious code...

MAL-2025-28879 Malicious code in parse-server-hotfix (npm)

The package parse-server-hotfix was found to contain malicious code...

MAL-2025-28882 Malicious code in parse-unix-minify-balance-route (npm)

The package parse-unix-minify-balance-route was found to contain malicious code...

MAL-2025-21578 Malicious code in global-baryon-dotenv-parse-variables-frontend (npm)

The package global-baryon-dotenv-parse-variables-frontend was found to contain malicious code...

MAL-2025-12974 Malicious code in @zalastax/nolb-parse (npm)

The package @zalastax/nolb-parse was found to contain malicious code...

MAL-2025-26718 Malicious code in morgan-dotenv-parse-variables-mysql-geodynamo (npm)

The package morgan-dotenv-parse-variables-mysql-geodynamo was found to contain malicious code...

MAL-2025-29393 Malicious code in playwright-mocha-chai-dotenv-parse-variables (npm)

The package playwright-mocha-chai-dotenv-parse-variables was found to contain malicious code...

MAL-2025-38510 Malicious code in vite-parse (npm)

The package vite-parse was found to contain malicious code...

OliveTin OS Command Injection vulnerability

OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go...

CVE-2025-50946

OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go...

CVE-2025-8846

A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected is the function parseline of the file parser.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used...