MAL-2025-18205 Malicious code in delta-asteroid-nly184-project (npm)

The package delta-asteroid-nly184-project was found to contain malicious code...

MAL-2025-29406 Malicious code in plne2 (npm)

The package plne2 was found to contain malicious code...

MAL-2025-10707 Malicious code in @zalastax/nolb-as_ (npm)

The package @zalastax/nolb-as was found to contain malicious code...

MAL-2025-11422 Malicious code in @zalastax/nolb-f7 (npm)

The package @zalastax/nolb-f7 was found to contain malicious code...

MAL-2025-25462 Malicious code in llaveros (npm)

The package llaveros was found to contain malicious code...

MAL-2025-26778 Malicious code in moxilua (npm)

The package moxilua was found to contain malicious code...

MAL-2025-17819 Malicious code in cucmber (npm)

The package cucmber was found to contain malicious code...

MAL-2025-12682 Malicious code in @zalastax/nolb-node-sh (npm)

The package @zalastax/nolb-node-sh was found to contain malicious code...

MAL-2025-12896 Malicious code in @zalastax/nolb-package6 (npm)

The package @zalastax/nolb-package6 was found to contain malicious code...

MAL-2025-22030 Malicious code in gtunes (npm)

The package gtunes was found to contain malicious code...

MAL-2025-30909 Malicious code in pxinetd (npm)

The package pxinetd was found to contain malicious code...

MAL-2025-18188 Malicious code in deku-zyx (npm)

The package deku-zyx was found to contain malicious code...

MAL-2025-13619 Malicious code in @zalastax/nolb-randomr (npm)

The package @zalastax/nolb-randomr was found to contain malicious code...

MAL-2025-20474 Malicious code in fig-india-owcb (npm)

The package fig-india-owcb was found to contain malicious code...

MAL-2025-11879 Malicious code in @zalastax/nolb-haj (npm)

The package @zalastax/nolb-haj was found to contain malicious code...

MAL-2025-22583 Malicious code in honeydew-lemon-olij (npm)

The package honeydew-lemon-olij was found to contain malicious code...

MAL-2025-19055 Malicious code in eability (npm)

The package eability was found to contain malicious code...

MAL-2025-10623 Malicious code in @zalastax/nolb-abz (npm)

The package @zalastax/nolb-abz was found to contain malicious code...

GHSA-52F5-9888-HMC6 tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter

Summary [email protected] is vulnerable to an Arbitrary temporary file / directory write via symbolic link dir parameter. Details According to the documentation there are some conditions that must be held: // https://github.com/raszi/node-tmp/blob/v0.2.3/README.md?plain=1L41-L50 Other breaking changes,...

Improper Verification of Cryptographic Signature

Overview @node-saml/node-saml is a SAML 2.0 implementation for Node.js Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via validatePostResponseAsync due to loading of the assertion from the unsigned original response document. An attacker can...