Malicious code in debug-book-analyze-easy-lambda (npm)

The package debug-book-analyze-easy-lambda was found to contain malicious code...

MAL-2025-18144 Malicious code in debug-book-analyze-easy-lambda (npm)

The package debug-book-analyze-easy-lambda was found to contain malicious code...

MAL-2025-7839 Malicious code in @epc-infra/lambda-utils (npm)

The package @epc-infra/lambda-utils was found to contain malicious code...

Malicious code in ebos_lambda_utils (npm)

The package eboslambdautils was found to contain malicious code...

MAL-2025-15096 Malicious code in authenticate-log-lambda-double-notify (npm)

The package authenticate-log-lambda-double-notify was found to contain malicious code...

MAL-2025-24940 Malicious code in lambda-pipeline-construct (npm)

The package lambda-pipeline-construct was found to contain malicious code...

MAL-2025-15670 Malicious code in big-lambda-report-transpile-beta (npm)

The package big-lambda-report-transpile-beta was found to contain malicious code...

MAL-2025-15227 Malicious code in aws-lambda-authenticator (npm)

The package aws-lambda-authenticator was found to contain malicious code...

MAL-2025-14475 Malicious code in analyze-lambda-daemon-kappa-file (npm)

The package analyze-lambda-daemon-kappa-file was found to contain malicious code...

MAL-2025-38454 Malicious code in virtualize-balance-lambda-pipe-validate (npm)

The package virtualize-balance-lambda-pipe-validate was found to contain malicious code...

MAL-2025-39766 Malicious code in xi-secure-lambda-uglify-authorize (npm)

The package xi-secure-lambda-uglify-authorize was found to contain malicious code...

MAL-2025-19107 Malicious code in ebos_lambda_utils (npm)

The package eboslambdautils was found to contain malicious code...

MAL-2025-25471 Malicious code in load-lambda-fire-code-emulate (npm)

The package load-lambda-fire-code-emulate was found to contain malicious code...

CVE-2024-24753

Bref enable serverless PHP on AWS Lambda. When Bref is used in combination with an API Gateway with the v2 format, it does not handle multiple values headers. If PHP generates a response with two headers having the same key but different values only the latest one is kept. If an application relie...

CVE-2024-24754

Bref enable serverless PHP on AWS Lambda. When Bref is used with the Event-Driven Function runtime and the handler is a RequestHandlerInterface, then the Lambda event is converted to a PSR7 object. During the conversion process, if the request is a MultiPart, each part is parsed and its content...

CVE-2024-24752

Bref enable serverless PHP on AWS Lambda. When Bref is used with the Event-Driven Function runtime and the handler is a RequestHandlerInterface, then the Lambda event is converted to a PSR7 object. During the conversion process, if the request is a MultiPart, each part is parsed and for each whic...

CVE-2019-10777

In aws-lambda versions prior to version 1.0.5, the "config.FunctioName" is used to construct the argument used within the "exec" function without any sanitization. It is possible for a user to inject arbitrary commands to the "zipCmd" used within "config.FunctionName"...

better-lambda-deploy (>=0.0.4 <=0.6.9), localambda (=0.0.1) potentially affected by CVE-2025-3048 via aws-sam-cli (>=0.40.0 <=1.12.0)

aws-sam-cli PYPI version =0.40.0, =0.0.4, =0.6.9 - localambda =0.0.1 Source cves: CVE-2025-3048 Source advisory: OSV:GHSA-PP64-WJ43-XQCR...

better-lambda-deploy (>=0.0.4 <=0.6.9), localambda (=0.0.1) potentially affected by CVE-2025-3047 via aws-sam-cli (>=0.40.0 <=1.12.0)

aws-sam-cli PYPI version =0.40.0, =0.0.4, =0.6.9 - localambda =0.0.1 Source cves: CVE-2025-3047 Source advisory: OSV:GHSA-PX37-JPQX-97Q9...

@capriza/far (>=0.1.2 <=2.4.2), @cobalt-engine/cobower (=2.0.0) +388 more potentially affected by CVE-2024-12905 via tar-fs (>=0.1.8 <=1.16.3)

tar-fs NPM version =0.1.8, =0.1.2, =6.0.3, =6.0.3, =6.0.3, =2.1.1, =0.10.2, =0.0.0-beta.1, =0.0.0-beta.1, =0.0.0-beta.1, =0.1.0, =0.1.0, =1.0.5, =1.1.2 - @elm-node/npm-scripts =1.0.0 - @hlsrules-test/fc-libreoffice =1.0.0 and more Source cves: CVE-2024-12905 Source advisory: OSV:GHSA-PQ67-2WWV-3X...