Malicious code in node-red-contrib-john-temp (npm)

The package node-red-contrib-john-temp was found to contain malicious code...

Malicious code in @zalastax/nolb-node-red-cl (npm)

The package @zalastax/nolb-node-red-cl was found to contain malicious code...

Malicious code in @zalastax/nolb-node-red-contrib-k (npm)

The package @zalastax/nolb-node-red-contrib-k was found to contain malicious code...

Malicious code in @zalastax/nolb-node-red-contrib-h (npm)

The package @zalastax/nolb-node-red-contrib-h was found to contain malicious code...

Malicious code in node-red-contrib-flows_splitter (npm)

The package node-red-contrib-flowssplitter was found to contain malicious code...

Malicious code in @zalastax/nolb-node-red-2 (npm)

The package @zalastax/nolb-node-red-2 was found to contain malicious code...

Malicious code in node-red-contrib-storfly-vtview (npm)

The package node-red-contrib-storfly-vtview was found to contain malicious code...

Malicious code in node-red-contrib-max31856 (npm)

The package node-red-contrib-max31856 was found to contain malicious code...

Malicious code in @zalastax/nolb-node-red-contrib-d (npm)

The package @zalastax/nolb-node-red-contrib-d was found to contain malicious code...

Malicious code in node-red-contrib-storfly-iot-vtview (npm)

The package node-red-contrib-storfly-iot-vtview was found to contain malicious code...

Malicious code in @zalastax/nolb-node-red-contrib-a (npm)

The package @zalastax/nolb-node-red-contrib-a was found to contain malicious code...

Malicious code in @zalastax/nolb-node-red-contrib-c (npm)

The package @zalastax/nolb-node-red-contrib-c was found to contain malicious code...

Malicious code in node-red-contrib-storfly-iot-hp (npm)

The package node-red-contrib-storfly-iot-hp was found to contain malicious code...

MAL-2025-12674 Malicious code in @zalastax/nolb-node-red-contrib-h (npm)

The package @zalastax/nolb-node-red-contrib-h was found to contain malicious code...

MAL-2025-12671 Malicious code in @zalastax/nolb-node-red-contrib-e (npm)

The package @zalastax/nolb-node-red-contrib-e was found to contain malicious code...

CVE-2019-15607

A stored XSS vulnerability is present within node-red version: = 0.20.7 npm package, which is a visual tool for wiring the Internet of Things. This issue will allow the attacker to steal session cookies, deface web applications, etc...

Malicious code in node-red-contrib-object-to-array (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc617e826788805ca870b385151ace964f43893d9560c8b2d9615276520929a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-red-contrib-tfjs-object-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ae6d965935a10741f1389a09905356a09e9d7358dc5e8d1e3b56fac4602c78d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...