jones-mysql (1.0.0), jones-ndb (1.0.0) potentially affected by unknown CVE via database-jones (1.2.8)

database-jones NPM version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on database-jones and may be impacted: - jones-mysql 1.0.0 - jones-ndb 1.0.0 Source cves: unknown CVE Source advisory: GHSA-MGFM-MM3Q-QGW7...

Malicious code in Database-Jones (npm)

The package Database-Jones was found to contain malicious code. --- Credit: OpenSSF source...

jones-mysql (1.0.0), jones-ndb (1.0.0) potentially affected by unknown CVE via database-jones (1.2.8)

database-jones NPM version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on database-jones and may be impacted: - jones-mysql 1.0.0 - jones-ndb 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17995...

MAL-2025-17995 Malicious code in Database-Jones (npm)

The package Database-Jones was found to contain malicious code...

Malicious code in Database-Jones (npm)

The package Database-Jones was found to contain malicious code...