451 matches found
MAL-2025-37957 Malicious code in ursa-update-spectron-webdriver-helmet (npm)
The package ursa-update-spectron-webdriver-helmet was found to contain malicious code...
MAL-2025-22374 Malicious code in helmet-bellatrix-kastra-pulsar (npm)
The package helmet-bellatrix-kastra-pulsar was found to contain malicious code...
MAL-2025-19738 Malicious code in equinox-cli-helmet-quasarjet (npm)
The package equinox-cli-helmet-quasarjet was found to contain malicious code...
MAL-2025-22762 Malicious code in http-helmet (npm)
The package http-helmet was found to contain malicious code...
MAL-2025-22375 Malicious code in helmet-framework-concurrently-jovian (npm)
The package helmet-framework-concurrently-jovian was found to contain malicious code...
Malicious code in equinox-cli-helmet-quasarjet (npm)
The package equinox-cli-helmet-quasarjet was found to contain malicious code...
Malicious code in request-helmet (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 240e3c0e344b97358f5f4788bec6e5e1e1466f45e62d14e98953182412e0827f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview request-helmet is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malware in request-helmet
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-6342 Malicious code in request-helmet (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 240e3c0e344b97358f5f4788bec6e5e1e1466f45e62d14e98953182412e0827f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-54128: Improper Neutralization of Input During Web Page Generation
HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend. In versions 11.0.7 and below, the NodeJS version of HAX CMS has a disabled Content Security Policy CSP. This configuration is insecure for a production application because it does not protect against...
CVE-2022-46947
Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletecategory...
CVE-2022-46949
Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletehelmet...
CVE-2022-46946
Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletebrand...
CVE-2022-46117
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=viewproduct=...
CVE-2022-46127
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=deleteproduct...
CVE-2022-46126
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/brands/managebrand.php?id=...
CVE-2022-46125
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manageclient=...