MAL-2025-1838 Malicious code in iberia-internal (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1824 Malicious code in google-logger (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1802 Malicious code in epicagames-db (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11438 Malicious code in robloxmatcher (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11419 Malicious code in permissionscaling (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11399 Malicious code in mona-service-target-mini (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11282 Malicious code in @volcenjine/openapi (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in not-a-real-dep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 784465edafb8e247845de45eb1f9c8d0b19b03706e98e861f1a570732d66cba5 The OpenSSF Package Analysis project identified 'not-a-real-dep' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

GHSA-JW37-5GQR-CF9J Server-Side Request Forgery in ftp-srv

Background The FTP protocol creates two connections, one for commands and one for transferring data. This second data connection can be created in two ways, on the server by sending the PASV command, or on the client by sending the PORT command. The PORT command sends the IP and port for the serv...

Server-Side Request Forgery in ftp-srv

Background The FTP protocol creates two connections, one for commands and one for transferring data. This second data connection can be created in two ways, on the server by sending the PASV command, or on the client by sending the PORT command. The PORT command sends the IP and port for the serv...