MAL-2025-191441 Malicious code in uniswap-router-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e3a687837fce5a55d7b2865a9f5f4c2d0e652b52e49dfd86f76a6243ccd2b0 The package uniswap-router-sdk was found to contain malicious code. Source: ghsa-malware...

Malicious code in easypanel-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ac9db35167e3722d383a2c76a094d96d19c1097508758bccde5c8a5445550bd The package easypanel-sdk was found to contain malicious code. Source: ghsa-malware fdce617dc7f1837495fa0e90e3ac7d214b335c36893c9f97d749e28949d361d3...

MAL-2025-191085 Malicious code in easypanel-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ac9db35167e3722d383a2c76a094d96d19c1097508758bccde5c8a5445550bd The package easypanel-sdk was found to contain malicious code. Source: ghsa-malware fdce617dc7f1837495fa0e90e3ac7d214b335c36893c9f97d749e28949d361d3...

Malicious code in zuper-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4cc2065f0dd8abd271cf1dd9577497f7fb19724820c50925509236093e73567 The package zuper-sdk was found to contain malicious code. Source: ghsa-malware c84dbb98c137f6b50ce20f0cae6113a3d32f5cd6910583273c4d11d4966d105c Any...

MAL-2025-191156 Malicious code in zuper-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4cc2065f0dd8abd271cf1dd9577497f7fb19724820c50925509236093e73567 The package zuper-sdk was found to contain malicious code. Source: ghsa-malware c84dbb98c137f6b50ce20f0cae6113a3d32f5cd6910583273c4d11d4966d105c Any...

EUVD-2025-199232

Malicious code in zuper-sdk npm...

Malicious code in n8n-nodes-vercel-ai-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3e7549add420dd6e29fcc100779e22f42e36e3d6a194d64ac5cefe5a764971 The package n8n-nodes-vercel-ai-sdk was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190977 Malicious code in n8n-nodes-vercel-ai-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3e7549add420dd6e29fcc100779e22f42e36e3d6a194d64ac5cefe5a764971 The package n8n-nodes-vercel-ai-sdk was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199066

Malicious code in n8n-nodes-vercel-ai-sdk npm...

Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`

Impact In version 10.11.0, a change to how the SDK collects request data in Node.js applications caused certain incoming HTTP headers to be added as trace span attributes. When sendDefaultPii: true was set, a few headers that were previously redacted - including Authorization and Cookie - were...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

CVE-2025-56400

Cross-Site Request Forgery CSRF vulnerability in the OAuth implementation of the Tuya SDK 6.5.0 for Android and iOS, affects the Tuya Smart and Smartlife mobile applications, as well as other third-party applications that integrate the SDK, allows an attacker to link their own Amazon Alexa accoun...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...