MAL-2025-27649 Malicious code in node-red-contrib-wotkit (npm)

The package node-red-contrib-wotkit was found to contain malicious code...

MAL-2025-12651 Malicious code in @zalastax/nolb-node-red-cb (npm)

The package @zalastax/nolb-node-red-cb was found to contain malicious code...

MAL-2025-12657 Malicious code in @zalastax/nolb-node-red-com (npm)

The package @zalastax/nolb-node-red-com was found to contain malicious code...

MAL-2025-12677 Malicious code in @zalastax/nolb-node-red-contrib-k (npm)

The package @zalastax/nolb-node-red-contrib-k was found to contain malicious code...

MAL-2025-27644 Malicious code in node-red-contrib-modbusio (npm)

The package node-red-contrib-modbusio was found to contain malicious code...

MAL-2025-12668 Malicious code in @zalastax/nolb-node-red-contrib-b (npm)

The package @zalastax/nolb-node-red-contrib-b was found to contain malicious code...

MAL-2025-12655 Malicious code in @zalastax/nolb-node-red-cm (npm)

The package @zalastax/nolb-node-red-cm was found to contain malicious code...

MAL-2025-12648 Malicious code in @zalastax/nolb-node-red-a (npm)

The package @zalastax/nolb-node-red-a was found to contain malicious code...

MAL-2025-27646 Malicious code in node-red-contrib-storfly-iot-hp (npm)

The package node-red-contrib-storfly-iot-hp was found to contain malicious code...

MAL-2025-27641 Malicious code in node-red-contrib-flows_splitter (npm)

The package node-red-contrib-flowssplitter was found to contain malicious code...

MAL-2025-12666 Malicious code in @zalastax/nolb-node-red-contrib-5 (npm)

The package @zalastax/nolb-node-red-contrib-5 was found to contain malicious code...

MAL-2025-12652 Malicious code in @zalastax/nolb-node-red-ch (npm)

The package @zalastax/nolb-node-red-ch was found to contain malicious code...

MAL-2025-12664 Malicious code in @zalastax/nolb-node-red-contrib-2 (npm)

The package @zalastax/nolb-node-red-contrib-2 was found to contain malicious code...

MAL-2025-27643 Malicious code in node-red-contrib-max31856 (npm)

The package node-red-contrib-max31856 was found to contain malicious code...

MAL-2025-12647 Malicious code in @zalastax/nolb-node-red-2 (npm)

The package @zalastax/nolb-node-red-2 was found to contain malicious code...

MAL-2025-12678 Malicious code in @zalastax/nolb-node-red-contrib-l (npm)

The package @zalastax/nolb-node-red-contrib-l was found to contain malicious code...

MAL-2025-12663 Malicious code in @zalastax/nolb-node-red-contrib-1 (npm)

The package @zalastax/nolb-node-red-contrib-1 was found to contain malicious code...

The vulnerability of the Node-RED visual programming tool’s server on the Pilz IndustrialPI operating system allows a perpetrator to execute arbitrary commands.

The vulnerability of the Node-RED visual programming tool on the Pilz IndustrialPI industrial computer server is related to the absence of default authentication settings. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-41656 Pilz: Missing Authentication in Node-RED integration

An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the authentication for the NodeRED server is not configured by default...

CVE-2025-41656 Pilz: Missing Authentication in Node-RED integration

An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the authentication for the NodeRED server is not configured by default...