MAL-2025-41244 Malicious code in hey-message-content (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 82160038204459189291779030b0cd92dbe157e779d3b1cae48e25a84053ee9a The OpenSSF Package Analysis project identified 'hey-message-content' @ 8.99.1 npm as malicious. It is considered malicious because: - The packa...

Malicious code in @zalastax/nolb-_hey (npm)

The package @zalastax/nolb-hey was found to contain malicious code...

Malicious code in @hey-amplify/scripts (npm)

The package @hey-amplify/scripts was found to contain malicious code...

MAL-2025-7996 Malicious code in @hey-amplify/scripts (npm)

The package @hey-amplify/scripts was found to contain malicious code...

MAL-2025-10079 Malicious code in @zalastax/nolb-_hey (npm)

The package @zalastax/nolb-hey was found to contain malicious code...

Basecamp: Two click Account Takeover

A vulnerability was discovered in the HEY Email Android application that allowed for a two-click account takeover. Improper handling of incoming deeplinks led to the application's authorization bearer token being sent to an attacker-controlled server if the user could be tricked into clicking a...

Basecamp: Critical Data Breach - Big Data for all domains

The researcher provided an Excel sheet that appeared to be a dump of a breach database. The origin of the data entries in the database was unclear. A small number of valid HEY accounts with enabled 2FA were found, as well as a slightly larger number of other product accounts with valid passwords...

Alarm system cyberattack leaves those in need struggling to call for help

An alarm system company that allows those in need to ask for help at the touch of a button has suffered a cyberattack, causing serious disruption. Tunstall Netherlands says the attack left the control room struggling to receive distress calls from clients on Sunday November 12, 2023. Tunstall,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, slsa-verifier, minio, nats, gobuster, amass, k3d, pulumi-kubernetes-operator, terraform, memcached-exporter, terraform-provider-sendgrid, weaviate, nginx-stable, secrets-store-csi-driver, hey, skaffold, terraform-provider-azurerm, git-lfs,...

futamata (0.0.36), hey-you (>=4.1.5, <=4.1.7) +1 more potentially affected by CVE-2023-29198 via electron (24.0.0)

electron NPM version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - futamata 0.0.36 - hey-you =4.1.5, =0.0.31, =0.0.33 Source cves: CVE-2023-29198 Source advisory: OSV:GHSA-P7V2-P9M8-QQG7...

CVE-2022-41723 vulnerabilities

Vulnerabilities for packages: hey, dynamic-localpv-provisioner-fips, go, gke-gcloud-auth-plugin, terraform-provider-sendgrid, kubeflow-fips, wireguard-go, restic, grpcurl, k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, kube-state-metrics, kubeflow-katib, kubeflow...

GHSA-VVPX-J8F3-3W6H vulnerabilities

Vulnerabilities for packages: hey, dynamic-localpv-provisioner-fips, go, gke-gcloud-auth-plugin, terraform-provider-sendgrid, kubeflow-fips, wireguard-go, restic, grpcurl, k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, kube-state-metrics, kubeflow-katib, kubeflow...

CVE-2021-38561 vulnerabilities

Vulnerabilities for packages: hey, dynamic-localpv-provisioner, k3d, vt-cli, terraform-provider-sendgrid, gitleaks...

CVE-2021-38561 vulnerabilities

Vulnerabilities for packages: hey, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, gitleaks, k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, vt-cli...

GHSA-69CH-W2M2-3VJP vulnerabilities

Vulnerabilities for packages: hey, dynamic-localpv-provisioner, k3d, vt-cli, kubeflow, grpcurl, php-fpmexporter, terraform-provider-sendgrid, gitleaks...

CVE-2022-32149 vulnerabilities

Vulnerabilities for packages: hey, dynamic-localpv-provisioner, k3d, vt-cli, kubeflow, grpcurl, php-fpmexporter, terraform-provider-sendgrid, gitleaks...

GHSA-69CG-P879-7622 vulnerabilities

Vulnerabilities for packages: hey, kubeflow-katib, dynamic-localpv-provisioner, k3d, wireguard-go, kubeflow, grpcurl, terraform-provider-sendgrid...

GHSA-69CG-P879-7622 vulnerabilities

Vulnerabilities for packages: hey, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, kubeflow-fips, wireguard-go, grpcurl, k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, kube-state-metrics, kubeflow-katib, kubeflow...

CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: hey, kubeflow-katib, dynamic-localpv-provisioner, k3d, wireguard-go, kubeflow, grpcurl, terraform-provider-sendgrid...

CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: hey, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, kubeflow-fips, wireguard-go, grpcurl, k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, kube-state-metrics, kubeflow-katib, kubeflow...