Malicious code in godsplan (npm)

Running the godsplan 3.0.2 CLI connects to Chrome's debugging port 9222 and injects JavaScript into every open page. It bypasses Content Security Policy and intercepts selected test-page requests. When triggered by a mouse gesture or keyboard shortcut, the injected script collects the page text a...

MAL-2026-17315 Malicious code in godsplan (npm)

Running the godsplan 3.0.2 CLI connects to Chrome's debugging port 9222 and injects JavaScript into every open page. It bypasses Content Security Policy and intercepts selected test-page requests. When triggered by a mouse gesture or keyboard shortcut, the injected script collects the page text a...

MAL-2026-16462 Malicious code in godzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5d71d42ffa8a11d58cf5bf2cf8eab5f95e14d047f0907b6e0581a3c33ea299 On module load, godzz sets process.env.NODETLSREJECTUNAUTHORIZED='0', disabling TLS certificate validation for the entire Node process. Its main entr...

Malicious code in godzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5d71d42ffa8a11d58cf5bf2cf8eab5f95e14d047f0907b6e0581a3c33ea299 On module load, godzz sets process.env.NODETLSREJECTUNAUTHORIZED='0', disabling TLS certificate validation for the entire Node process. Its main entr...

WS-2019-0068

All versions of graphql-code-generator have an Insecure Default Configuration. The packages sets NODETLSREJECTUNAUTHORIZED to 0, disabling certificate verification for the entire project...

PT-2020-21213

Name of the Vulnerable Software and Affected Versions graphql-code-generator versions prior to 0.18.2 Description The issue is related to an insecure default configuration where the NODE TLS REJECT UNAUTHORIZED variable is set to 0. This setting disables certificate verification for the entire...

Insecure Default Configuration

Overview Versions of graphql-code-generator prior to 0.18.2 have an Insecure Default Configuration. The packages sets NODETLSREJECTUNAUTHORIZED to 0, disabling certificate verification for the entire project. This results in Insecure Communication for the process. Recommendation Upgrade to versio...