Malicious code in l3mon-chat (npm)

The package l3mon-chat was found to contain malicious code...

Malicious code in chat-api1 (npm)

The package chat-api1 was found to contain malicious code...

Malicious code in express-chat (npm)

The package express-chat was found to contain malicious code...

Malicious code in @zalastax/nolb-chat (npm)

The package @zalastax/nolb-chat was found to contain malicious code...

MAL-2025-10888 Malicious code in @zalastax/nolb-chat (npm)

The package @zalastax/nolb-chat was found to contain malicious code...

MAL-2025-14638 Malicious code in api-chat-fanpage-facebook (npm)

The package api-chat-fanpage-facebook was found to contain malicious code...

MAL-2025-9146 Malicious code in @oraliepham/api-chat-fanpage-facebook (npm)

The package @oraliepham/api-chat-fanpage-facebook was found to contain malicious code...

MAL-2025-24856 Malicious code in l3mon-chat (npm)

The package l3mon-chat was found to contain malicious code...

MAL-2025-20263 Malicious code in fb-chat-deku (npm)

The package fb-chat-deku was found to contain malicious code...

MAL-2025-16859 Malicious code in chat-api1 (npm)

The package chat-api1 was found to contain malicious code...

MAL-2025-9234 Malicious code in @phamton/api-chat-fanpage-facebook (npm)

The package @phamton/api-chat-fanpage-facebook was found to contain malicious code...

MAL-2025-20264 Malicious code in fb-chat-shadow (npm)

The package fb-chat-shadow was found to contain malicious code...

MAL-2025-37349 Malicious code in tw-chat-search (npm)

The package tw-chat-search was found to contain malicious code...

MAL-2025-14468 Malicious code in an0n-chat-lib (npm)

The package an0n-chat-lib was found to contain malicious code...

Malicious code in dpais-chat-template-pwa (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4d39545ec9be8c0beabaaf1f508b0f468a884898b3fb8b8ae6d73b5cb62c54fc The OpenSSF Package Analysis project identified...

MAL-2025-6923 Malicious code in dpais-chat-template-pwa (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4d39545ec9be8c0beabaaf1f508b0f468a884898b3fb8b8ae6d73b5cb62c54fc The OpenSSF Package Analysis project identified...

CVE-2025-54868

LibreChat is a ChatGPT clone with additional features. In versions 0.0.6 through 0.7.7-rc1, an exposed testing endpoint allows reading arbitrary chats directly from the Meilisearch engine. The endpoint /api/search/test allows for direct access to stored chats in the Meilisearch engine without...

CVE-2025-54868

LibreChat is a ChatGPT clone with additional features. In versions 0.0.6 through 0.7.7-rc1, an exposed testing endpoint allows reading arbitrary chats directly from the Meilisearch engine. The endpoint /api/search/test allows for direct access to stored chats in the Meilisearch engine without...

CVE-2025-54868 LibreChat exposes arbitrary chats through Meilisearch engine

LibreChat is a ChatGPT clone with additional features. In versions 0.0.6 through 0.7.7-rc1, an exposed testing endpoint allows reading arbitrary chats directly from the Meilisearch engine. The endpoint /api/search/test allows for direct access to stored chats in the Meilisearch engine without...

CVE-2025-54868 LibreChat exposes arbitrary chats through Meilisearch engine

LibreChat is a ChatGPT clone with additional features. In versions 0.0.6 through 0.7.7-rc1, an exposed testing endpoint allows reading arbitrary chats directly from the Meilisearch engine. The endpoint /api/search/test allows for direct access to stored chats in the Meilisearch engine without...