MAL-2025-49147 Malicious code in epic-fortnite-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08e616a8873cb7c4eb6d86f24e1be4453b4fd29da0e7cf5cbcbc2d3ff54f6ebf The package epic-fortnite-server was found to contain malicious code...

MAL-2025-49176 Malicious code in epic-okta-express-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236ca6a4112270418e1024dd6136da781ae916d8e5e2db49347e687cd5c85ac0 The package epic-okta-express-middleware was found to contain malicious code...

MAL-2025-49202 Malicious code in epic-ue-feed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594ffb368cb69ecd195e205d9977f2c10c94fd4f99a15790eaa78e6fc07c961f The package epic-ue-feed was found to contain malicious code...

MAL-2025-49112 Malicious code in eos-media (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 484f800f5d8c38bfa4abccc77524044478de475c392e91801c6644af74c575b4 The package eos-media was found to contain malicious code...

Malicious code in epic-service-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84d47c1d44b830a1f09c3748941c2e88012f6b23eaed2a7e0cb1b8cd4f39f18 The package epic-service-worker was found to contain malicious code...

MAL-2025-49103 Malicious code in @epicgames/testprivate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0536c6ff02d2f0a6a962ec7228277682d582de2257380291ddbbf4aad9849d The package @epicgames/testprivate was found to contain malicious code...

MAL-2025-49218 Malicious code in epic-web-video-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41136c89076d65b05c642e97a8f22ff9dd61e42848e70ee4203e4ead6041db7 The package epic-web-video-player was found to contain malicious code...

Malicious code in epic-games-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 171b5f79dcaf130369e4217640b310c4720b2ce20871c0f9387056defeb66fcd The package epic-games-footer was found to contain malicious code...

MAL-2025-49134 Malicious code in epic-diesel-feed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0adcbf905c997345ce189329119f9b930faa8f8bbc07707262e5f1e83f280c61 The package epic-diesel-feed was found to contain malicious code...

MAL-2025-49244 Malicious code in windows_registry_editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0bcad8f2c4bdd8438d2826d78f285454aa72dc719c9fb7d52a74928c5b999d0 The package windowsregistryeditor was found to contain malicious code...

MAL-2025-49226 Malicious code in jira-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b162bfbb866437258b70101e3c788048ca508578aacbbdd1341c7713e2ce08 The package jira-lint was found to contain malicious code...

MAL-2025-49148 Malicious code in epic-fortnite-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec12a2963a01211f4bcc3d1d1ad779f842b987405ca597a857f4283adcc6389f The package epic-fortnite-styles was found to contain malicious code...

Malicious code in epic-web-purchase-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c0f0244033cb7d783e430a89d61d08f850df810d2b284dd37e150d6004dae1 The package epic-web-purchase-frontend was found to contain malicious code...

MAL-2025-49149 Malicious code in epic-freight (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c5d1aa48abc62d9f210f859c6b4744f874c90a610142aae853b6eeb5aa0d09 The package epic-freight was found to contain malicious code...

MAL-2025-49233 Malicious code in mod-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec890b586ea0ff47a8ba914ff95c535bdeebbdfaf6788b6357a5afae32c9463 The package mod-manager was found to contain malicious code...

MAL-2025-49170 Malicious code in epic-node-marketo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a5bcaefa79c4208736d118e3cffe13ed49b7656821501bce7473bb2c3bf762 The package epic-node-marketo was found to contain malicious code...

MAL-2025-49240 Malicious code in store-std (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d331f4d0ceded686ff7dab5f2329693385f0e0381a8c236d44c9234e24083a The package store-std was found to contain malicious code...

MAL-2025-49125 Malicious code in epic-common-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e76e853a5ddeb0b5baed9270a0858d1df0976691cfd336b223e8208c241371 The package epic-common-node was found to contain malicious code...

GO-2025-4070 HashiCorp Vault and Vault Enterprise's AWS Auth method may be susceptible to authentication bypass in github.com/hashicorp/vault

HashiCorp Vault and Vault Enterprise's AWS Auth method may be susceptible to authentication bypass in github.com/hashicorp/vault...

BIT-VAULT-2025-11621 Vault AWS auth method bypass due to AWS client cache

Vault and Vault Enterprise’s “Vault” AWS Auth method may be susceptible to authentication bypass if the role of the configured boundprincipaliam is the same across AWS accounts, or uses a wildcard. This vulnerability, CVE-2025-11621, is fixed in Vault Community Edition 1.21.0 and Vault Enterprise...