Malicious code in viktorparserctf8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e1243238b2a1eade50d8bcfebe117fd9f3090271497fce1f9d1e2798abeaa4 The package viktorparserctf8 was found to contain malicious code. Source: ghsa-malware 610271459dc452bb1384a92a84e0e37bd11f3d688166faa2ee174e81fdaf8a...

MAL-2025-192654 Malicious code in viktorparserctf8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e1243238b2a1eade50d8bcfebe117fd9f3090271497fce1f9d1e2798abeaa4 The package viktorparserctf8 was found to contain malicious code. Source: ghsa-malware 610271459dc452bb1384a92a84e0e37bd11f3d688166faa2ee174e81fdaf8a...

Malicious code in test-mal-npm-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f6f3e205b514fc5d9c6e98be4d3b0bf7049c38a0ff62e678584aaff50fc643 The package test-mal-npm-pkg was found to contain malicious code. Source: ghsa-malware d97b7f5012899a502ba9d154bc5f146717e56795f702823294ea3636b433c7...

MAL-2025-192633 Malicious code in hubstyletokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270a762e8fe2aca75314b8b673b01068f64424cb56d5442954e0c44119475dff The package hubstyletokens was found to contain malicious code. Source: ghsa-malware b315d930157f2b1fd1b14cddfbd3f09759c6b275da5b51570eadff87cadf27b8...

Malicious code in okta-mfa-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ebb2032d926e5816a1691e5d8260071225622a855da97c958eb62bdc038c6d9 The package okta-mfa-library was found to contain malicious code. Source: ghsa-malware 108be553f36138742a538cfeeead5e936c7b26a0ceeea8f626656acbf1bd47...

Malicious code in tailwind-logic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fef6c93124c5e2f579250c84fe8c1b10aaed49b5dae9bf976f00cbb20075e3a The package tailwind-logic was found to contain malicious code. Source: ghsa-malware d9321c51ef015fd1a0ba0bc9832011cb21b596ac44351ce34b11aebad63471d4...

MAL-2025-192642 Malicious code in tailwind-logic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fef6c93124c5e2f579250c84fe8c1b10aaed49b5dae9bf976f00cbb20075e3a The package tailwind-logic was found to contain malicious code. Source: ghsa-malware d9321c51ef015fd1a0ba0bc9832011cb21b596ac44351ce34b11aebad63471d4...

MAL-2025-192640 Malicious code in tailwind-animationbased (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7eef2c8a93c095a7c203eb12ac4dab149ff712b00eef96d4a8febb468710f0 The package tailwind-animationbased was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192612 Malicious code in ctfxmlflgcheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c9132a189fafbc7ceddc628c9c59a2b9a82a6225d714f90b167e9ead0d2df5 The package ctfxmlflgcheck was found to contain malicious code. Source: ghsa-malware f63a449906d3cc26b3649aef217acb2fa01373b30b1dfe3f7f3923b6811d785a...

Malicious code in my-ctf-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1937327d3ed32ee35590bce097cac61388dff43915682f2fceee4e7cc074c29f The package my-ctf-package was found to contain malicious code. Source: ghsa-malware 4ffe4e6f718d8543dc984772c0f919e029ffc02ed49b70f89ba018d787408ddb...

MAL-2025-192614 Malicious code in react-enhanced-glow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d6a21a6e0e2094ca1f9327d83a0c38da77bd3b8f8ffbad317ef4530a7d14c45 The package react-enhanced-glow was found to contain malicious code. Source: ghsa-malware...

CVE-2025-34438

AVideo versions prior to 20.1 contain an insecure direct object reference vulnerability allowing users with upload permissions to modify the rotation metadata of any video. The endpoint verifies upload capability but fails to enforce ownership or management rights for the targeted video...

CVE-2025-34438

AVideo versions prior to 20.1 contain an insecure direct object reference vulnerability allowing users with upload permissions to modify the rotation metadata of any video. The endpoint verifies upload capability but fails to enforce ownership or management rights for the targeted video...

CVE-2025-34438 AVideo < 20.1 IDOR Arbitrary Video Rotation

AVideo versions prior to 20.1 contain an insecure direct object reference vulnerability allowing users with upload permissions to modify the rotation metadata of any video. The endpoint verifies upload capability but fails to enforce ownership or management rights for the targeted video...

CVE-2025-34438 AVideo < 20.1 IDOR Arbitrary Video Rotation

AVideo versions prior to 20.1 contain an insecure direct object reference vulnerability allowing users with upload permissions to modify the rotation metadata of any video. The endpoint verifies upload capability but fails to enforce ownership or management rights for the targeted video...

CVE-2025-34438

Summary: CVE-2025-34438 affects AVideo versions prior to 20.1. It is an insecure direct object reference (IDOR) where users with upload permissions can modify the rotation metadata of arbitrary videos because the endpoint verifies upload capability but fails to enforce ownership/administrative ri...

EUVD-2025-203956

AVideo versions prior to 20.0 contain an insecure direct object reference vulnerability allowing users with upload permissions to modify the rotation metadata of any video. The endpoint verifies upload capability but fails to enforce ownership or management rights for the targeted video...

CVE-2025-34438 AVideo < 20.1 IDOR Arbitrary Video Rotation

AVideo versions prior to 20.1 contain an insecure direct object reference vulnerability allowing users with upload permissions to modify the rotation metadata of any video. The endpoint verifies upload capability but fails to enforce ownership or management rights for the targeted video...

PT-2025-51890

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 20.1 Description AVideo versions prior to 20.1 contain an insecure direct object reference issue. Users with upload permissions can modify the rotation metadata of any video. The ''/video/id'' endpoint verifies upload...

Malicious code in openhands-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3094854e6f43f64c218e6ccdf21f319cff916fef4a412442faccf4b9cd616fe9 The package openhands-frontend was found to contain malicious code. Source: ghsa-malware...