MAL-2025-45508 Malicious code in parsec-sociobiology-dotenv-safe-neutronstar (npm)

The package parsec-sociobiology-dotenv-safe-neutronstar was found to contain malicious code...

Malicious code in dotenv-safe-polaris-paleoanthropology-filament (npm)

The package dotenv-safe-polaris-paleoanthropology-filament was found to contain malicious code...

Malicious code in tailwindcss-tailwindcss-dotenv-safe-less-loader (npm)

The package tailwindcss-tailwindcss-dotenv-safe-less-loader was found to contain malicious code...

Malicious code in dotenv-safe-whitedwarf-castor-magnetar (npm)

The package dotenv-safe-whitedwarf-castor-magnetar was found to contain malicious code...

Malicious code in dotenv-safe-fusion-norma-joviology (npm)

The package dotenv-safe-fusion-norma-joviology was found to contain malicious code...

MAL-2025-45092 Malicious code in magnetosphere-dotenv-safe-optimize-css-assets-webpack-plugin-mineralogy (npm)

The package magnetosphere-dotenv-safe-optimize-css-assets-webpack-plugin-mineralogy was found to contain malicious code...

MAL-2025-44058 Malicious code in dotenv-safe-fusion-norma-joviology (npm)

The package dotenv-safe-fusion-norma-joviology was found to contain malicious code...

MAL-2025-44060 Malicious code in dotenv-safe-sedna-procyon-halley (npm)

The package dotenv-safe-sedna-procyon-halley was found to contain malicious code...

MAL-2025-45180 Malicious code in metalsmith-node-config-dotenv-safe-bellatrix (npm)

The package metalsmith-node-config-dotenv-safe-bellatrix was found to contain malicious code...

MAL-2025-43874 Malicious code in commitlint-pm2-proxima-dotenv-safe (npm)

The package commitlint-pm2-proxima-dotenv-safe was found to contain malicious code...

MAL-2025-44057 Malicious code in dotenv-safe-exoplanetology-exobiology-virgo (npm)

The package dotenv-safe-exoplanetology-exobiology-virgo was found to contain malicious code...

Malicious code in dotenv-safe-exoplanetology-exobiology-virgo (npm)

The package dotenv-safe-exoplanetology-exobiology-virgo was found to contain malicious code...

Malicious code in commitlint-pm2-proxima-dotenv-safe (npm)

The package commitlint-pm2-proxima-dotenv-safe was found to contain malicious code...

Malicious code in toml-dotenv-safe-dysonswarm-quantumfoam (npm)

The package toml-dotenv-safe-dysonswarm-quantumfoam was found to contain malicious code...

MAL-2025-44059 Malicious code in dotenv-safe-polaris-paleoanthropology-filament (npm)

The package dotenv-safe-polaris-paleoanthropology-filament was found to contain malicious code...

MAL-2025-44061 Malicious code in dotenv-safe-whitedwarf-castor-magnetar (npm)

The package dotenv-safe-whitedwarf-castor-magnetar was found to contain malicious code...

MAL-2025-45994 Malicious code in semantic-release-dotenv-safe-commitlint-node-sass (npm)

The package semantic-release-dotenv-safe-commitlint-node-sass was found to contain malicious code...

MAL-2025-46362 Malicious code in toml-dotenv-safe-dysonswarm-quantumfoam (npm)

The package toml-dotenv-safe-dysonswarm-quantumfoam was found to contain malicious code...

CVE-2025-9824

ImpactThe attacker can validate if a user exists by checking the time login returns. This timing difference can be used to enumerate valid usernames, after which an attacker could attempt brute force attacks. PatchesThis vulnerability has been patched, implementing a timing-safe form login...

CVE-2025-48546

In checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...