Malicious code in node-core-libs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33f74e3f73fd5580ecf994b7db0349ee540754d65d4467b8b04b8c79e3d257b scripts/postinstall.js runs automatically on npm install Windows only and behaves as a classic install-time dropper. It XOR-decodes key 0x5A a...

MAL-2026-6276 Malicious code in node-core-libs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33f74e3f73fd5580ecf994b7db0349ee540754d65d4467b8b04b8c79e3d257b scripts/postinstall.js runs automatically on npm install Windows only and behaves as a classic install-time dropper. It XOR-decodes key 0x5A a...

Insertion of Sensitive Information Into Sent Data

Overview @sentry/node-core is a Sentry Node-Core SDK Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the sendDefaultPii configuration option. An attacker can gain access to sensitive HTTP headers, such as authentication cookies, by viewing...

Malicious code in httpeace-node-core (npm)

The package httpeace-node-core was found to contain malicious code...

MAL-2025-22764 Malicious code in httpeace-node-core (npm)

The package httpeace-node-core was found to contain malicious code...

org.webjars.npm:class-validator (>=0.8.5 <=0.14.0), org.webjars.npm:image-thumbnail (=1.0.15) +8 more potentially affected by CVE-2025-56200 via org.webjars.npm:validator (>=10.11.0 <=9.2.0)

org.webjars.npm:validator MAVEN version =10.11.0, =0.8.5, =3.1.2, =3.18.2, =3.25.1 Source cves: CVE-2025-56200 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-14102004...

node core 资源管理错误漏洞

node core is a Node.js server-side infrastructure framework based on Egg.js. Node Core suffers from a Resource Management Error vulnerability. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor announcement...

node core 信任管理问题漏洞

node core is a Node.js server-side infrastructure framework based on Egg.js. Node Core is vulnerable to a trust management issue. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

node core 输入验证错误漏洞

node core is a Node.js server-side infrastructure framework based on Egg.js. An input validation error vulnerability exists in Node Core. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

collectortoqueue (>=1.2.10 <=1.2.26), gladys (>=2.1.5 <=2.1.9) +13 more potentially affected by CVE-2016-10551 via waterline-sequel (>=0.0.21 <=0.4.0)

waterline-sequel NPM version =0.0.21, =1.2.10, =2.1.5, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =0.10.1, =0.0.1, =0.10.1, =0.7.3, =1.0.0-alpha.0, =0.1.0, =0.4.8 Source cves: CVE-2016-10551 Source advisory: OSV:GHSA-CGPP-WM2H-6HQX...