4740 matches found
Malicious code in kssd-vol2-rev (npm)
The package kssd-vol2-rev was found to contain malicious code...
Malicious code in winston-loopback-nodejs-bulma (npm)
The package winston-loopback-nodejs-bulma was found to contain malicious code...
Malicious code in release-it-prettier-nodejs-fornax (npm)
The package release-it-prettier-nodejs-fornax was found to contain malicious code...
MAL-2025-46436 Malicious code in uglify-js-forever-equinox-nodejs (npm)
The package uglify-js-forever-equinox-nodejs was found to contain malicious code...
MAL-2025-43676 Malicious code in bulma-nodejs-achernar-farout (npm)
The package bulma-nodejs-achernar-farout was found to contain malicious code...
MAL-2025-46278 Malicious code in test-mlw2-borde-reest-lazed-cocas (npm)
The package test-mlw2-borde-reest-lazed-cocas was found to contain malicious code...
MAL-2025-42965 Malicious code in @trp-ta-nitro/secrets-nodejs (npm)
The package @trp-ta-nitro/secrets-nodejs was found to contain malicious code...
MAL-2025-45794 Malicious code in release-it-prettier-nodejs-fornax (npm)
The package release-it-prettier-nodejs-fornax was found to contain malicious code...
Malicious code in bulma-nodejs-achernar-farout (npm)
The package bulma-nodejs-achernar-farout was found to contain malicious code...
Malicious code in boson-nodejs-jupiter-robotics (npm)
The package boson-nodejs-jupiter-robotics was found to contain malicious code...
Malicious code in uglify-js-forever-equinox-nodejs (npm)
The package uglify-js-forever-equinox-nodejs was found to contain malicious code...
Malicious code in izar-magellan-readable-nodejs (npm)
The package izar-magellan-readable-nodejs was found to contain malicious code...
MAL-2025-43646 Malicious code in boson-nodejs-jupiter-robotics (npm)
The package boson-nodejs-jupiter-robotics was found to contain malicious code...
MAL-2025-44700 Malicious code in ini-nodejs-speleology-filament (npm)
The package ini-nodejs-speleology-filament was found to contain malicious code...
Malicious code in nodejs-smtp (npm)
The package nodejs-smtp was found to contain malicious code...
MAL-2025-45337 Malicious code in nodejs-smtp (npm)
The package nodejs-smtp was found to contain malicious code...
MAL-2025-42186 Malicious code in @amiga-fwk-nodejs/metrics (npm)
The package @amiga-fwk-nodejs/metrics was found to contain malicious code...
urllib3 does not control redirects in browsers and Node.js
...
A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. Node.js Permission Model do not operate on file descriptors, however, operations such as fs.fchown or fs.fchmod can use a "read-only" file descriptor to change the owner and permissions of a file.
...
CVE-2025-58047
Volto is a React based frontend for the Plone Content Management System. In versions from 19.0.0-alpha.1 to before 19.0.0-alpha.4, 18.0.0 to before 18.24.0, 17.0.0 to before 17.22.1, and prior to 16.34.0, an anonymous user could cause the NodeJS server part of Volto to quit with an error when...