PT-2026-116141

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's outbound-request SSRF checks when an authenticated user creates a Space,...

Malicious code in @zapier/ai-actions-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0711da4a6c6d0dbc599d757b367430a63ae51f6f4fb48b6758fb21ba718b0778 The package @zapier/ai-actions-react was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190917 Malicious code in @zapier/ai-actions-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0711da4a6c6d0dbc599d757b367430a63ae51f6f4fb48b6758fb21ba718b0778 The package @zapier/ai-actions-react was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-198847

Malicious code in @zapier/ai-actions npm...

Malicious code in @zapier/ai-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a316e279c8bb03071a6e5197270ffbb95c5f23592a64c504271f47e0f9adb11f The package @zapier/ai-actions was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190830 Malicious code in @zapier/ai-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a316e279c8bb03071a6e5197270ffbb95c5f23592a64c504271f47e0f9adb11f The package @zapier/ai-actions was found to contain malicious code. Source: ghsa-malware...