Malicious code in calling-extensions-sdk-demo-minimal-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4167 Malicious code in calling-extensions-sdk-demo-minimal-js (npm)

--- -= Per source details. Do not edit below this line.=-...

@aosweb/osui (>=0.0.23 <=0.0.25), @baosight/er (>=0.1.87 <=0.3.2) +44 more potentially affected by CVE-2025-27597 via @intlify/message-resolver (>=9.1.0 <=9.1.10)

@intlify/message-resolver NPM version =9.1.0, =0.0.23, =0.1.87, =9.14.2, =9.14.2, =0.3.1, =0.5.0, =1.9.7, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =3.0.0-alpha, =1.8.9, =2.14.0-alpha.3 and more Source cves: CVE-2025-27597 Source advisory: OSV:GHSA-P2PH-7G93-HW3M...

CVE-2022-26509

Improper conditions check in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...