Insomnia API Client 安全漏洞

Insomnia API Client is an open source cross-platform API client for GraphQL, REST, WebSockets, SSE and gRPC from Kong Open Source. A security vulnerability exists in Insomnia API Client versions prior to 11.0.2 that stems from a template injection issue that could lead to arbitrary code execution...

Malicious code in meta-api-client (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1897 Malicious code in meta-api-client (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1854 Malicious code in instacart-api-client (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in epicagames-api-client (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dropbox-api-client (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1781 Malicious code in dropbox-api-client (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1729 Malicious code in apple-api-client (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-2566

A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240313. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file api/client/getextensionyl.php. The manipulation of the argument imei leads to sql...

MAL-2025-546 Malicious code in meli-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 152f98442370419a0e0c3fb36c2e01d398741677238bd205877b136806a6922b The OpenSSF Package Analysis project identified 'meli-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98ac8ee2b0e096fab5b480794e79170dbc9b2162464fdf0f1e0124de1575cfd5 The OpenSSF Package Analysis project identified 'lyft-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-523 Malicious code in lyft-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98ac8ee2b0e096fab5b480794e79170dbc9b2162464fdf0f1e0124de1575cfd5 The OpenSSF Package Analysis project identified 'lyft-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in iberia-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 319f6abf3b09e20e9437a49664f6cc30ab33e4f25254aedd9d3d440e46770d2e The OpenSSF Package Analysis project identified 'iberia-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-485 Malicious code in iberia-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 319f6abf3b09e20e9437a49664f6cc30ab33e4f25254aedd9d3d440e46770d2e The OpenSSF Package Analysis project identified 'iberia-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

Malicious code in godaddy-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 724a0da7bd51020bd0cb61eeedbe68f99b1b5c60d9d2deb419fd7c686671a4ad The OpenSSF Package Analysis project identified 'godaddy-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-458 Malicious code in godaddy-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 724a0da7bd51020bd0cb61eeedbe68f99b1b5c60d9d2deb419fd7c686671a4ad The OpenSSF Package Analysis project identified 'godaddy-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...

Malicious code in coinbase-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a25de48e1e4b5422328ce0552b7bbefcbff48c60e5210c28c0a825009ca329b9 The OpenSSF Package Analysis project identified 'coinbase-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The...

MAL-2025-415 Malicious code in coinbase-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a25de48e1e4b5422328ce0552b7bbefcbff48c60e5210c28c0a825009ca329b9 The OpenSSF Package Analysis project identified 'coinbase-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The...

Malicious code in bookingcom-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab2ea2b7b235a47a2460539376dab8e2ab9b4021eaec754934cc11c7e2636672 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-396 Malicious code in bookingcom-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab2ea2b7b235a47a2460539376dab8e2ab9b4021eaec754934cc11c7e2636672 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...