MAL-2025-49001 Malicious code in external-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e93035f9471f41f1d28b532573b50bd3f0b5e086d74bc0fbd27e364169d71549 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-64101 ZITADEL Vulnerable to Account Takeover via Malicious Forwarded Header Injection

Zitadel is open-source identity infrastructure software. Prior to 4.6.0, 3.4.3, and 2.71.18, a potential vulnerability exists in ZITADEL's password reset mechanism. ZITADEL utilizes the Forwarded or X-Forwarded-Host header from incoming requests to construct the URL for the password reset...

Malicious code in geopost-angular-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b519cc34afbb8ac8a6adcebfa4765a2553ad14947386e79821c5ad76ad67684a The package geopost-angular-components was found to contain malicious code. Source: ghsa-malware...

Malicious code in xdater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b641058c31a73a57e1f88b0d8530757deb8d58bb5cab44d8d6804838e51ad66e The package xdater was found to contain malicious code. Source: ghsa-malware 352b4b106eecd6bc552fbe402da0fc80f976f9c06608453792e9b1c33a1836ff Any...

MAL-2025-48951 Malicious code in xdater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b641058c31a73a57e1f88b0d8530757deb8d58bb5cab44d8d6804838e51ad66e The package xdater was found to contain malicious code. Source: ghsa-malware 352b4b106eecd6bc552fbe402da0fc80f976f9c06608453792e9b1c33a1836ff Any...

MAL-2025-48927 Malicious code in func-analysist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80289c38bf711f5ac60787399d199be29ca23f0695b947ee46825c9a3ce226bf The package func-analysist was found to contain malicious code. Source: ghsa-malware bb257e8ae472109cbe751b79ea838ddb8a0272301fac276ca6ade81aaa72b7d9...

Malicious code in four-sdk-aes-ipheriv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d8d19d191eddc67d0a2a9f1987b679d130fc16751d12748f1412508aa114dd The package four-sdk-aes-ipheriv was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48928 Malicious code in fzreo-trading-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88d8fd4cc0828b828f3a6fe64daf9b8dc84c84729972d2c17de5559ab96c653 The package fzreo-trading-sdk was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48923 Malicious code in arno-baidu2-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131a10e926c682b41b450810caef439af7c7137fa95422b58970a57ff2a2316d The package arno-baidu2-test was found to contain malicious code. Source: ghsa-malware 380635db26fa9fbaa70b78c6dba294a362a9342cb346a4f0542792c92b7cb7...

MAL-2025-48936 Malicious code in tailwind-merge-setting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55691eae5f6f66a311844f34bbdd053f7d35afb774e5827ca2cd514ef9714ae The package tailwind-merge-setting was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48929 Malicious code in graphnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022ef4190a3153420248771034a085983347a98a7bbd3be8ce4eaf80b0d0dfd8 The package graphnet was found to contain malicious code. Source: ghsa-malware f027c14837595ab3595469caa7197e8cdf4f3288a53a4c1fbf970cbb7cd6018d Any...

Malicious code in graphnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022ef4190a3153420248771034a085983347a98a7bbd3be8ce4eaf80b0d0dfd8 The package graphnet was found to contain malicious code. Source: ghsa-malware f027c14837595ab3595469caa7197e8cdf4f3288a53a4c1fbf970cbb7cd6018d Any...

Malicious code in @jameson777/mytest8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b156e6ec35304232881859a1a11917ad7244fcea63f2683ef1a381098858d9d The package @jameson777/mytest8 was found to contain malicious code. Source: ghsa-malware...

Malicious code in @jameson777/mytest4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781112b2d078b0c465848b5c8e47b6da47abcaadfa2b57b4852d441598eec400 The package @jameson777/mytest4 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48919 Malicious code in @jameson777/mytest5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfcd1d23e28023307b1ce65b03a678a6b989b630795691e92b2d0a1fc7c7f99 The package @jameson777/mytest5 was found to contain malicious code. Source: ghsa-malware...

Malicious code in @jameson777/mytest5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfcd1d23e28023307b1ce65b03a678a6b989b630795691e92b2d0a1fc7c7f99 The package @jameson777/mytest5 was found to contain malicious code. Source: ghsa-malware...

Malicious code in @jameson777/mytest7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3923d583dcf8b3acb9a0d9917f1cfff2551863cecf0e4a5107862b4c5f27d5d The package @jameson777/mytest7 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48921 Malicious code in @jameson777/mytest7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3923d583dcf8b3acb9a0d9917f1cfff2551863cecf0e4a5107862b4c5f27d5d The package @jameson777/mytest7 was found to contain malicious code. Source: ghsa-malware...

Malicious code in @jameson777/mytest3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcbbebb7ce5ba46d06081d584c7329a31f024402453dddda87786d5a8e963bac The package @jameson777/mytest3 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48917 Malicious code in @jameson777/mytest3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcbbebb7ce5ba46d06081d584c7329a31f024402453dddda87786d5a8e963bac The package @jameson777/mytest3 was found to contain malicious code. Source: ghsa-malware...