1599 matches found
MAL-2026-10049 Malicious code in chai-await-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78d8b4da2e781df4437569123ba3913c3f0135bbef66addaa5766a109fdd98b The package impersonates a pino-style logger API but its exported middleware spawns a detached Node child process that runs lib/caller.js. caller.js...
Malicious code in chain-chai-await (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53dc585524bcc3e64a107006ba8c763591b071bb174c7acadd716b6e99ac1c34 The package presents itself as a pino-compatible logger exports pino, mirrors pino's lib/ layout with...
MAL-2026-10056 Malicious code in chain-chai-await (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53dc585524bcc3e64a107006ba8c763591b071bb174c7acadd716b6e99ac1c34 The package presents itself as a pino-compatible logger exports pino, mirrors pino's lib/ layout with...
Malicious code in tslint-conf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b464b1646f8e2d36ce68a86af599cc49d5381f08af70302ff01f42957234a1 The package presents itself as the pino logger README, index.d.ts, docs/, and lib/ files all reference pinojs/pino but is published under the unrelat...
ml-logger deserialization vulnerability
A vulnerability was determined in geyang ml-logger 0.10.36 and prior. Affected is the function loghandler of the file mllogger/server.py of the component Ping Handler. This manipulation of the argument data causes deserialization. It is possible to initiate the attack remotely. The exploit has be...
PYSEC-2026-1633 ml-logger deserialization vulnerability
A vulnerability was determined in geyang ml-logger 0.10.36 and prior. Affected is the function loghandler of the file mllogger/server.py of the component Ping Handler. This manipulation of the argument data causes deserialization. It is possible to initiate the attack remotely. The exploit has be...
ml-logger has path traversal in the file argument
A vulnerability was identified in geyang ml-logger 0.10.36 and prior. Affected by this vulnerability is the function loghandler of the file mllogger/server.py. Such manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit is publicly...
ml-logger file handler allows reading arbitrary files
A security flaw has been discovered in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this issue is the function streamhandler of the file mllogger/server.py of the component File Handler. Performing manipulation of the argument key results in information disclosure...
PYSEC-2026-1635 ml-logger file handler allows reading arbitrary files
A security flaw has been discovered in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this issue is the function streamhandler of the file mllogger/server.py of the component File Handler. Performing manipulation of the argument key results in information disclosure...
PYSEC-2026-1634 ml-logger has path traversal in the file argument
A vulnerability was identified in geyang ml-logger 0.10.36 and prior. Affected by this vulnerability is the function loghandler of the file mllogger/server.py. Such manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit is publicly...
MAL-2026-7382 Malicious code in rei-internal-logger (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rei-internal-logger (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in cli-pretty-logger (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7246 Malicious code in cli-pretty-logger (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7099 Malicious code in @tslogger/pino-pretty-logger (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @tslogger/pino-pretty-logger (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @magcd/pino-pretty-logger (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7083 Malicious code in @magcd/pino-pretty-logger (npm)
--- -= Per source details. Do not edit below this line.=-...