51130 matches found
CVE-2025-42887 Code Injection vulnerability in SAP Solution Manager
Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availabilit...
MAL-2025-66551 Malicious code in tensor-fi-utils-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e019daea1bdfd44c0cf583f38cd83ec5b2073b8b494e8ff91905e0b2f2f88e The package tensor-fi-utils-lib was found to contain malicious code. Source: ghsa-malware...
MAL-2025-66546 Malicious code in npmtest_chenguang (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f702a0658de936fc3084652027ce0383b048954aef2f39b5783af8edb2e8c7de The package npmtestchenguang was found to contain malicious code. Source: ghsa-malware c6f729e82fdac96b8daaca470b095362e03a02d531c217553f57ffb104cd93...
Malicious code in szsec-infos-report (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f7d0f83d7810b53b86603e822f34d4b2829f2f0ee8853839340239d99b8388 The package szsec-infos-report was found to contain malicious code. Source: ghsa-malware...
MAL-2025-66550 Malicious code in szsec-infos-report (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f7d0f83d7810b53b86603e822f34d4b2829f2f0ee8853839340239d99b8388 The package szsec-infos-report was found to contain malicious code. Source: ghsa-malware...
PT-2025-46228
Name of the Vulnerable Software and Affected Versions SAP Solution Manager affected versions not specified Description SAP Solution Manager is susceptible to a code injection issue stemming from inadequate input sanitization. An authenticated attacker can inject malicious code by calling a...
MAL-2025-66544 Malicious code in grid-settings (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b0798fc09c824e110a36baea640ebc023c337f246ab9cc2b6647eb4b9bddad The package grid-settings was found to contain malicious code. Source: ghsa-malware 4461bdacbed2361a56a39a0251d7a47f2454616c944b5380680198ea97f7ef20...
MAL-2025-66543 Malicious code in @walletwave/ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e6b9673bf6056f0f870d3aa6ad6c4e83ef1a3bf3b58a601dc9cae80d673390 The package @walletwave/ui was found to contain malicious code. Source: ghsa-malware 42ec23f1a72e982a80ced819057ca03a0d26999dc6b7417343456de67a35ec46...
Malicious code in @walletwave/backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4790acfbb7ffabf95ea0f8d998976b54d8d11ba20b7dd4aa2dcf35b429431a The package @walletwave/backend was found to contain malicious code. Source: ghsa-malware...
MAL-2025-66542 Malicious code in @walletwave/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786e84734b8e7f4af9096790c95dcb0dae82c3364c93e7a2e662c98f3e21e2c6 The package @walletwave/core was found to contain malicious code. Source: ghsa-malware df7464e8000db02c291bbd2af61bdf264c816df679997bf1cefc42d5d4825c...
EUVD-2025-48974
Malicious code in yelpingporpoisez3n npm...
Malicious code in putri-kue61-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18828fee5e85e1d541056fdda95ea523b5de698c5eaaba269d161204defcd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Server-Side Request Forgery (SSRF)
cors-anywhere is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to instances being configured as open proxies that forward attacker-controlled target URLs, methods, and headers without restriction, which allows an attacker to induce requests to internal-only endpoints...
MAL-2025-55022 Malicious code in chai-as-sorted (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0a3502254657767ec819133929d33c2b84f1d9607acc89e9557de2b80e9bed The package chai-as-sorted was found to contain malicious code. Source: ghsa-malware 0a769064bb46785af26b5ee4af98633de26f88bcad7b199c113bdf52940e195a...
Malicious code in web-vitals-help (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204b3a82026288b65a149e983d855812d21ccc8c61952dcb037c926c2b3a3452 The package web-vitals-help was found to contain malicious code. Source: ghsa-malware 93e30ad20be59206c5d91e0d2bff19f6c6969c69dc3ebc477ae0c980cc3d242...
MAL-2025-55021 Malicious code in web-vitals-help (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204b3a82026288b65a149e983d855812d21ccc8c61952dcb037c926c2b3a3452 The package web-vitals-help was found to contain malicious code. Source: ghsa-malware 93e30ad20be59206c5d91e0d2bff19f6c6969c69dc3ebc477ae0c980cc3d242...
Malicious code in @mts-ds/icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0112c17ea22a1384f1973813b785859e61805e29b2027b835dfa81c022bd846e The package @mts-ds/icons was found to contain malicious code. Source: ghsa-malware b51afa604dd61e1408dc95f628c00b6b379d7191214d2b77258a2a97f0cb38e4...
MAL-2025-55019 Malicious code in le-front-monitor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fdbc40ddfb10ff80c7c6f7a4ef4e08786eaa26459865bfc0e9af58b1cb17e23 The package le-front-monitor was found to contain malicious code. Source: ghsa-malware 0624c63b44959a7b08101b1b63db58d0e06dff2ce6566dcfa5d4e672379a31...
MAL-2025-55018 Malicious code in graphhub (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f3f531a91594ad386dc82c959af2f53b1e335972b4a7a451fe0184252616c3 The package graphhub was found to contain malicious code. Source: ghsa-malware 4b0d6ee11320721cc3e65d9887c3b251b574bc7e67419fe63dedaa18b15dad9b Any...