Malicious code in @js-to-lua/fast-follow-commands (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df9453e1ee97636a2ab1a62d9eed556436a2d9c1cd5a551571468cbe3d4e4d93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @foryjs/fory (npm)

The package @foryjs/fory was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 37cc85bd94dccf1460d716d3a603bad10397060a4aa5398b42882110d01cb85b This package installs a dependency hosted on a custom domain that runs an in...

Malicious code in @foryjs/hps (npm)

The package @foryjs/hps was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 0194b673bd924b4e8e007349e2af575df749db95449277785f569eb01e5b2005 This package installs a dependency hosted on a custom domain that runs an inf...

MAL-2025-20277 Malicious code in fbjs-opensource (npm)

The package fbjs-opensource was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 2dac438ef7432e162ead36cdd4121d9b31b47eaa1eb4ce24c0e577655dc496a5 This package installs a dependency hosted on a custom domain that runs an...

MAL-2025-21707 Malicious code in google-jsdocless (npm)

The package google-jsdocless was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security f373d78893327920491950970d76c5deb36859c2cbd890bbc815d16536840004 This package installs a dependency hosted on a custom domain that runs a...

MAL-2025-14184 Malicious code in airbnb-angular (npm)

The package airbnb-angular was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 7fff1f5000c3707b881be6257856ad35d4e8c37a27f0219b0e380ee46fcae5ea This package installs a dependency hosted on a custom domain that runs an...

MAL-2025-14188 Malicious code in airbnb-es5 (npm)

The package airbnb-es5 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 8210336cb16ae6428e936268a05b3f57769d39cfc48cbe662870575dc1faf80b This package installs a dependency hosted on a custom domain that runs an info...

Malicious code in google-jsdocless (npm)

The package google-jsdocless was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security f373d78893327920491950970d76c5deb36859c2cbd890bbc815d16536840004 This package installs a dependency hosted on a custom domain that runs a...

MAL-2025-14189 Malicious code in airbnb-flow (npm)

The package airbnb-flow was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security cf721a7ab34d44cd6e6bd7fa345aa5926234cdaa069ab71e315ee5780227c2b2 This package installs a dependency hosted on a custom domain that runs an inf...

MAL-2025-17150 Malicious code in closure-es6 (npm)

The package closure-es6 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security e0574a10de5b6d2bca40b32e3869d3a497db2729667e3523f97b8dde3f5846c7 This package installs a dependency hosted on a custom domain that runs an inf...

MAL-2025-14186 Malicious code in airbnb-bundle (npm)

The package airbnb-bundle was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security ea6660cd54215b1f9c967e8522156e2728e7ebb64ce3d3052d49f3e41bbffd87 This package installs a dependency hosted on a custom domain that runs an...

MAL-2025-17032 Malicious code in cimpress-atsquad (npm)

The package cimpress-atsquad was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 121957f49d6a6452b17a35ee2371cebf5f74e232fa821e93229fc5f0b2bd720a This package installs a dependency hosted on a custom domain that runs a...

MAL-2025-14192 Malicious code in airbnb-hooks (npm)

The package airbnb-hooks was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 33c430dfd90c926bae8206a1ac92dcb5b15de7ef7b729c5bc8f88452c6793b44 This package installs a dependency hosted on a custom domain that runs an in...

MAL-2025-19830 Malicious code in eslint-config-googlejs-es6 (npm)

The package eslint-config-googlejs-es6 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 8940b7796dc2789fa52ad6b2bff9f902eabc3c074e0146ffa0bf81789cc1d365 This package installs a dependency hosted on a custom domain...

Malicious code in react-airbnb-prettier (npm)

The package react-airbnb-prettier was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 8dfaae080b90705a47740e1ced1edacf0110db947f0f26fdd35e2805a2886d37 This package installs a dependency hosted on a custom domain that...

MAL-2025-14193 Malicious code in airbnb-lite (npm)

The package airbnb-lite was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 156283cf217f6dbaa79bc5dfcccb51a8febb9f4a1c0bdaee10e0b65dbae8a32c This package installs a dependency hosted on a custom domain that runs an inf...

MAL-2025-19031 Malicious code in dynamic-import-webpack (npm)

The package dynamic-import-webpack was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 6f9cf66ec7ebae846d89e7ce18fbdb1318e4cd99bf61c0e719bd78ce8c6aabe1 This package installs a dependency hosted on a custom domain that...

Automattic: Race condition on add 1 free domain

A race condition vulnerability was discovered on the Gravatar platform, which allowed users to bypass the limitation of claiming only one free custom domain. The vulnerability was triggered by creating multiple parallel requests to the public-api.wordpress.com endpoint, where the "meta" parameter...

GitLab: Subdomain takeover in Gitlab pages

The vulnerability allowed an attacker to take over a dangling custom domain pointing to GitLab Pages using "instanceX.gitlab.io". The problem arose when adding a custom domain to GitLab Pages without verifying the domain, as it would still serve content for 7 days before being disabled...

Can't sign in to workspaces with SAML using custom domains

Can't sign in to workspaces with SAML using custom domains, When try to access the custom domain URL get the error "Unable to Process Your Request, There was an unexpected error"...