MAL-2025-13406 Malicious code in @zalastax/nolb-q (npm)

The package @zalastax/nolb-q was found to contain malicious code...

Malicious code in q-ctrl (npm)

The package q-ctrl was found to contain malicious code...

Malicious code in @zalastax/nolb-google-q (npm)

The package @zalastax/nolb-google-q was found to contain malicious code...

Malicious code in @zalastax/nolb-q (npm)

The package @zalastax/nolb-q was found to contain malicious code...

Malicious code in @zalastax/nolb-passport-q (npm)

The package @zalastax/nolb-passport-q was found to contain malicious code...

MAL-2025-11665 Malicious code in @zalastax/nolb-google-q (npm)

The package @zalastax/nolb-google-q was found to contain malicious code...

MAL-2025-13586 Malicious code in @zalastax/nolb-random-q (npm)

The package @zalastax/nolb-random-q was found to contain malicious code...

MAL-2025-11765 Malicious code in @zalastax/nolb-graphql-q (npm)

The package @zalastax/nolb-graphql-q was found to contain malicious code...

MAL-2025-12545 Malicious code in @zalastax/nolb-ngx-q (npm)

The package @zalastax/nolb-ngx-q was found to contain malicious code...

MAL-2025-11826 Malicious code in @zalastax/nolb-gulp-q (npm)

The package @zalastax/nolb-gulp-q was found to contain malicious code...

MAL-2025-13061 Malicious code in @zalastax/nolb-passport-q (npm)

The package @zalastax/nolb-passport-q was found to contain malicious code...

Malicious code in @zalastax/nolb-ng-q (npm)

The package @zalastax/nolb-ng-q was found to contain malicious code...

Malicious code in @zalastax/nolb-qmuzik-q (npm)

The package @zalastax/nolb-qmuzik-q was found to contain malicious code...

Malicious code in @zalastax/nolb-discord-q (npm)

The package @zalastax/nolb-discord-q was found to contain malicious code...

MAL-2025-12181 Malicious code in @zalastax/nolb-lion-lib-q (npm)

The package @zalastax/nolb-lion-lib-q was found to contain malicious code...

BIT-GITLAB-2025-2867 Improper Control of Generation of Code ('Code Injection') in GitLab

An issue has been discovered in the GitLab Duo with Amazon Q affecting all versions from 17.8 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. A specifically crafted issue could manipulate AI-assisted development features to potentially expose sensitive project data to unauthorized...

CVE-2025-8217

The Amazon Q Developer Visual Studio Code VS Code extension v1.84.0 contains inert, injected code designed to call the Q Developer CLI. The code executes when the extension is launched within the VS Code environment; however the injected code contains a syntax error which prevents it from making ...

CVE-2025-8217

The Amazon Q Developer Visual Studio Code VS Code extension v1.84.0 contains inert, injected code designed to call the Q Developer CLI. The code executes when the extension is launched within the VS Code environment; however the injected code contains a syntax error which prevents it from making ...

CVE-2025-8217 Inert Malicious script injected into Amazon Q Developer Visual Studio Code (VS Code) Extension

The Amazon Q Developer Visual Studio Code VS Code extension v1.84.0 contains inert, injected code designed to call the Q Developer CLI. The code executes when the extension is launched within the VS Code environment; however the injected code contains a syntax error which prevents it from making ...

CVE-2025-8217 Inert Malicious script injected into Amazon Q Developer Visual Studio Code (VS Code) Extension

The Amazon Q Developer Visual Studio Code VS Code extension v1.84.0 contains inert, injected code designed to call the Q Developer CLI. The code executes when the extension is launched within the VS Code environment; however the injected code contains a syntax error which prevents it from making ...