Malicious code in childprocess-tracker (npm)

The package childprocess-tracker was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in tsihealth-client (npm)

Source: amazon-inspector 554372f29af60ad8e6e5a33171a736baddcc652772b0452c81a4010d3f1e5218 index.js is a top-level self-decoding IIFE that XOR-decodes a URI-encoded payload keyed on the enclosing function's own source and evals the result at module load; the decoder aborts with 'the code has been...

MAL-2025-16982 Malicious code in childprocess-tracker (npm)

The package childprocess-tracker was found to contain malicious code...

Malicious code in childprocess-tracker (npm)

The package childprocess-tracker was found to contain malicious code...

GHSA-753C-PHHG-CJ29 Madge vulnerable to command injection

This affects the package madge before 4.0.1. It is possible to specify a custom Graphviz path via the graphVizPath option parameter which, when the .image, .svg or .dot functions are called, is executed by the childprocess.exec function. PoC js const madge = require'madge'; madge'..', graphVizPat...

CVE-2013-1445

The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator PRNG before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a...