Everest-core security vulnerabilities

Everest-core is a major component of the open-source electric vehicle charging software stack developed by EVerest. Versions of everest-core prior to 2025.10.0 contained security vulnerabilities. These vulnerabilities allowed attackers to exhaust the operating system’s memory by establishing an...

MAL-2025-38474 Malicious code in vista-everest-yvt509-project (npm)

The package vista-everest-yvt509-project was found to contain malicious code...

MAL-2025-40036 Malicious code in xylophone-everest-jjh399-project (npm)

The package xylophone-everest-jjh399-project was found to contain malicious code...

Malicious code in jasmine-everest-aez381-project (npm)

The package jasmine-everest-aez381-project was found to contain malicious code...

MAL-2025-24872 Malicious code in labyrinth-everest-rgd440-project (npm)

The package labyrinth-everest-rgd440-project was found to contain malicious code...