MAL-2025-557 Malicious code in meli-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 323ab06bc2e65542017ab341bb31cbb5163ad6ed63cf9259878b1a7c2c9fc000 The OpenSSF Package Analysis project identified 'meli-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa22f50a8a669b15c880da7ceb0b0a5977b7051dcedd06fd7166143e1af7599c The OpenSSF Package Analysis project identified 'lyft-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-534 Malicious code in lyft-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa22f50a8a669b15c880da7ceb0b0a5977b7051dcedd06fd7166143e1af7599c The OpenSSF Package Analysis project identified 'lyft-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-501 Malicious code in instacart-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 535cc528932dede0fbcb6f287ec4fa891c980a4a97c070e887203f5c0ed3f494 The OpenSSF Package Analysis project identified 'instacart-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in godaddy-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5b5c3188dc74ec3577bb87af0f0ef6b1702ec5508ceff8ec1f9bd90385ab19f8 The OpenSSF Package Analysis project identified 'godaddy-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-468 Malicious code in godaddy-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5b5c3188dc74ec3577bb87af0f0ef6b1702ec5508ceff8ec1f9bd90385ab19f8 The OpenSSF Package Analysis project identified 'godaddy-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in epicagames-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ca1ec871e8a317af62ecdd30f1d27fe970de87497a933c26105942deae71b64d The OpenSSF Package Analysis project identified 'epicagames-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-447 Malicious code in epicagames-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ca1ec871e8a317af62ecdd30f1d27fe970de87497a933c26105942deae71b64d The OpenSSF Package Analysis project identified 'epicagames-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

Malicious code in dropbox-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 17a4446bf449348fa824663891e88151cde9c81a2ad28680a022caa5fb0711ad The OpenSSF Package Analysis project identified 'dropbox-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-429 Malicious code in dropbox-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 17a4446bf449348fa824663891e88151cde9c81a2ad28680a022caa5fb0711ad The OpenSSF Package Analysis project identified 'dropbox-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 00fffe8a9d54ad61ee1ae7e0d4091db1d8f442df37de1763e2a81e4647fc0dba The OpenSSF Package Analysis project identified 'amazon-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-382 Malicious code in amazon-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 00fffe8a9d54ad61ee1ae7e0d4091db1d8f442df37de1763e2a81e4647fc0dba The OpenSSF Package Analysis project identified 'amazon-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

CVE-2024-55891 Information Disclosure via Exception Handling/Logger in TYPO3

TYPO3 is a free and open source Content Management Framework. It has been discovered that the install tool password has been logged as plaintext in case the password hashing mechanism used for the password was incorrect. Users are advised to update to TYPO3 versions 13.4.3 ELTS which fixes the...

Malicious code in uber-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddfbcc0bce009349873248f526418b14cb9c9f9b575e74b3fc1787fda4af9b76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-109 Malicious code in uber-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddfbcc0bce009349873248f526418b14cb9c9f9b575e74b3fc1787fda4af9b76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-34481

Name of the Vulnerable Software and Affected Versions: Apache Log4cxx versions prior to 1.5.0 Description: Apache Log4cxx contains an Improper Output Neutralization for Logs issue. When using HTMLLayout, logger names are not properly escaped when writing to an HTML file. If untrusted data is used...

Malicious code in quintoandar-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4af1eeb8b81ed935d92039b3a23f267d60ba38766214fd0254d9530a3c9b08e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12028 Malicious code in quintoandar-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4af1eeb8b81ed935d92039b3a23f267d60ba38766214fd0254d9530a3c9b08e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in byted-gulu-ms-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7e4265d07794719fa6a64db194f5b5c070de062f83c208ae9704eaa19fa3645 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11947 Malicious code in byted-gulu-ms-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7e4265d07794719fa6a64db194f5b5c070de062f83c208ae9704eaa19fa3645 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...