MAL-2025-30840 Malicious code in pulsar-solis-pino-pretty-dysonswarm (npm)

The package pulsar-solis-pino-pretty-dysonswarm was found to contain malicious code...

MAL-2025-30843 Malicious code in pulsar-webdriverio-express-atlas (npm)

The package pulsar-webdriverio-express-atlas was found to contain malicious code...

MAL-2025-32139 Malicious code in resonance-socketio-pulsar-meteor (npm)

The package resonance-socketio-pulsar-meteor was found to contain malicious code...

MAL-2025-34770 Malicious code in test-greatfilter-meteor-pulsar (npm)

The package test-greatfilter-meteor-pulsar was found to contain malicious code...

MAL-2025-15999 Malicious code in boson-epimetheus-pulsar-vulcan (npm)

The package boson-epimetheus-pulsar-vulcan was found to contain malicious code...

MAL-2025-15309 Malicious code in babel-pulsar-eventhoriz-kaus (npm)

The package babel-pulsar-eventhoriz-kaus was found to contain malicious code...

MAL-2025-40171 Malicious code in yam-pulsar-uct5 (npm)

The package yam-pulsar-uct5 was found to contain malicious code...

MAL-2025-33051 Malicious code in shack-pulsar-yitx (npm)

The package shack-pulsar-yitx was found to contain malicious code...

MAL-2025-38684 Malicious code in vuetify-electron-builder-pulsar-module (npm)

The package vuetify-electron-builder-pulsar-module was found to contain malicious code...

MAL-2025-33213 Malicious code in sierra-pulsar-2nao (npm)

The package sierra-pulsar-2nao was found to contain malicious code...

MAL-2025-33750 Malicious code in spinach-pulsar-mttw (npm)

The package spinach-pulsar-mttw was found to contain malicious code...

MAL-2025-38780 Malicious code in warp-metabolomics-carpo-pulsar (npm)

The package warp-metabolomics-carpo-pulsar was found to contain malicious code...

MAL-2025-34014 Malicious code in stratosphere-meteor-testcafe-pulsar (npm)

The package stratosphere-meteor-testcafe-pulsar was found to contain malicious code...

MAL-2025-34696 Malicious code in temple-pulsar-n9r6 (npm)

The package temple-pulsar-n9r6 was found to contain malicious code...

app.cash.backfila:client-misk (>=0.1.0 <=2023.11.24.141218-0357917), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc <=0.1.4-20210806.0204-5341f38) +1456 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-ext-jdk15on (>=1.49 <=1.70)

org.bouncycastle:bcprov-ext-jdk15on MAVEN version =1.49, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.3-20210805.0116-93702c4, =0.1.0, =2023.06.07.114626-93b9d6f, =0.1.0, =0.1.4-20220614.0152-5ae0eef, =3.0.1, =2.10.0-11-1, =1.1.5, =1.0.2,...

com.ascentstream.pulsar:bcfips-include-test (>=3.0.7.0-SNAPSHOT-a030c50 <=3.0.8.0-SNAPSHOT-16a7bcc), com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.7.0-SNAPSHOT-a030c50 <=4.0.11.0) +13 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcpkix-fips (>=1.0.5 <=2.0.11)

org.bouncycastle:bcpkix-fips MAVEN version =1.0.5, =3.0.7.0-SNAPSHOT-a030c50, =3.0.7.0-SNAPSHOT-a030c50, =2.1.2, =8.0.0, =1.2.0, =1.17.0, =1.17.0, =3.1.0, =3.0.0.1, =3.0.0.1, =3.13.14, =3.0.0, =1.0.4, =1.0.0, =19.0.0, =25.0.6 Source cves: CVE-2025-8916 Source advisory:...

cn.jarkata:jarkata-encrypt (=1.0.0), cn.ponfee:commons-core (>=1.1 <=1.4) +242 more potentially affected by CVE-2025-8885 via org.bouncycastle:bcprov-ext-jdk18on (>=1.71 <=1.77)

org.bouncycastle:bcprov-ext-jdk18on MAVEN version =1.71, =1.1, =2.4.1, =3.0.0 - com.clever-cloud.pulsar4s:pulsar4s-akka-streams2.12 =2.9.1 - com.clever-cloud.pulsar4s:pulsar4s-akka-streams2.13 =2.9.1 - com.clever-cloud.pulsar4s:pulsar4s-akka-streams3 =2.9.1 -...

cn.herodotus.engine:message-spring-boot-starter (>=2.7.3.4 <=3.0.0-M2), com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=4.0.0 <=4.1.1) +179 more potentially affected by CVE-2025-27819 via org.apache.kafka:kafka_2.13 (>=2.4.0 <=3.3.2)

org.apache.kafka:kafka2.13 MAVEN version =2.4.0, =2.7.3.4, =4.0.0, =4.0.0, =4.0.0, =4.0.1, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =1.0.0, =1.2.0 - com.cerner.c...

cn.herodotus.engine:message-spring-boot-starter (>=2.7.3.4 <=3.0.0-M2), com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=4.0.0 <=4.1.1) +232 more potentially affected by CVE-2025-27818 via org.apache.kafka:kafka_2.13 (>=2.4.0 <=3.9.0)

org.apache.kafka:kafka2.13 MAVEN version =2.4.0, =2.7.3.4, =4.0.0, =4.0.0, =4.0.0, =4.0.1, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.7.4-SNAPSHOT-35e64fa - com.bisnode.kafka.authorizat...

The vulnerability of the Apache Pulsar IO Kafka Connector and the software Apache Pulsar IO Kafka Connect Adaptor lies in the insufficient protection of registration data, allowing attackers to disclose sensitive information.

The vulnerability of the Apache Pulsar IO Kafka Connector and the Apache Pulsar IO Kafka Connect Adapter software is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...