215 matches found
PT-2025-53605
Name of the Vulnerable Software and Affected Versions n8n versions 1.0.0 through less than 2.0.0 Description n8n is an open source workflow automation platform. A sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide, affecting versions from 1.0.0 up to, but not including,...
Remote Code Execution (RCE)
Overview n8n-workflow is a Workflow base code of n8n Affected versions of this package are vulnerable to Remote Code Execution RCE due to insufficient isolation in the Python Code Node that uses Pyodide. An authenticated attacker with permissions to create or modify workflows can execute arbitrar...
Remote Code Execution (RCE)
Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Remote Code Execution RCE due to insufficient isolation in the Python Code Node that uses Pyodide. An authenticated attacker with permissions to create or modify workflows can execute arbitrary...
Remote Code Execution (RCE)
Overview Affected versions of this package are vulnerable to Remote Code Execution RCE due to insufficient isolation in the Python Code Node that uses Pyodide. An authenticated attacker with permissions to create or modify workflows can execute arbitrary commands on the host system by creating or...
MAL-2025-148150 Malicious code in spica-andromeda-loglevel-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ee7b475b2f16de2e6e7f62b3abf6ed1d28eb1e3edf099e0649c2203bbd9fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-40238
Malicious code in candra-sambalado79-sluey npm...
MAL-2025-41356 Malicious code in @navify-platform/event (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-39959 Malicious code in xray-mango-ksvg (npm)
The package xray-mango-ksvg was found to contain malicious code...
MAL-2025-7920 Malicious code in @erboladaiteas/reprehenderit-voluptate-architecto (npm)
The package @erboladaiteas/reprehenderit-voluptate-architecto was found to contain malicious code...
MAL-2025-40684 Malicious code in yyb-pangu (npm)
The package yyb-pangu was found to contain malicious code...
MAL-2025-9998 Malicious code in @zalastax/nolb-_extraw (npm)
The package @zalastax/nolb-extraw was found to contain malicious code...
MAL-2025-8952 Malicious code in @malware-test-spook-edges-corse-decoy/test-mlw3-spook-edges-corse-decoy (npm)
The package @malware-test-spook-edges-corse-decoy/test-mlw3-spook-edges-corse-decoy was found to contain malicious code...
MAL-2025-41125 Malicious code in zucchini-sierra-papaya-pcivf (npm)
The package zucchini-sierra-papaya-pcivf was found to contain malicious code...
MAL-2025-8551 Malicious code in @malware-test-chock-prows-blush-foggy/test-mlw3-chock-prows-blush-foggy (npm)
The package @malware-test-chock-prows-blush-foggy/test-mlw3-chock-prows-blush-foggy was found to contain malicious code...
MAL-2025-8797 Malicious code in @malware-test-morns-bairn/test-mlw3-morns-bairn (npm)
The package @malware-test-morns-bairn/test-mlw3-morns-bairn was found to contain malicious code...
MAL-2025-40948 Malicious code in zerber (npm)
The package zerber was found to contain malicious code...
MAL-2025-40783 Malicious code in zebra-peacock-viv936-project (npm)
The package zebra-peacock-viv936-project was found to contain malicious code...
MAL-2025-8067 Malicious code in @hopper-b2b/armario (npm)
The package @hopper-b2b/armario was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...