Malicious code in iraza2-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7307c50f4f14642add677ac343109c8691dc3c5e67a0de88d27ed958e9593b The package iraza2-fca was found to contain malicious code. Source: ghsa-malware 5f0c32bd90ff347b69dae6471a8099e36ac566490bfa361193fc59f1c53785d4 Any...

CVE-2025-67727 Parse Server GitHub CI workflow vulnerable to RCE through Improper Privilege Management

Parse Server is an open source backend that can be deployed to any infrastructure that runs Node.js. In versions prior to 8.6.0-alpha.2, a GitHub CI workflow is triggered in a way that grants the GitHub Actions workflow elevated permissions, giving it access to GitHub secrets and write permission...

EUVD-2025-203056

Parse Server is an open source backend that can be deployed to any infrastructure that runs Node.js. In versions prior to 8.6.0-alpha.2, a GitHub CI workflow is triggered in a way that grants the GitHub Actions workflow elevated permissions, giving it access to GitHub secrets and write permission...

Malicious code in eslint-config-zoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20693f27e329a7fcc147d2a795f91732a8aca8b142bd27f0ec38803814ae388a The package eslint-config-zoo was found to contain malicious code. Source: ghsa-malware...

Malicious code in cms_comp_static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e057568833f54e2250c5364e595d7a3046f4eb94f2484b9a0a2236b948cb10f The package cmscompstatic was found to contain malicious code. Source: ghsa-malware 38ce02191cf2d82246d56083ba8f7c2c4c0f14a71060bf8beaea95851f3c7a1e...

Malicious code in cms_comp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7762e8867157bd05bfa8858e8f90ecd85ed0d6cf08c2435d264b9c61ad3420de The package cmscomp was found to contain malicious code. Source: ghsa-malware e58e38c37e8492486fd771954f0b1906c083a4dd5741600ca28a0bed5dd919a7 Any...

MAL-2025-192561 Malicious code in pp-js-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ef567b818a3642f6a51a1d26f23c897c1ecc73c6e431361ee1512d288ab455 The package pp-js-lib was found to contain malicious code. Source: ghsa-malware ba1fcfff2f6e86511e78c7092763167dfd731beef4f008cc933bf1bb5b4255e1 Any...

MAL-2025-192567 Malicious code in uba-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcb257605c151aafe2aad5cfe0a574b33989c084ccee06ee6ff0b74c33afb907 The package uba-plugins was found to contain malicious code. Source: ghsa-malware 2a73b282a96cbf09b981101e3b9e4056c51c7d9524e1cf62a41d71ce8f90f36f An...

MAL-2025-192554 Malicious code in camscanner-seo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd71df3759dceae15fc1ad93919d9a90c9f0bdb044e2e131db061e1e24d253e The package camscanner-seo was found to contain malicious code. Source: ghsa-malware f19e688be1202e28d6c442ecb5e70b4a5e79e7bb33559ff5669948b969324076...

MAL-2025-192558 Malicious code in eslint-config-zoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20693f27e329a7fcc147d2a795f91732a8aca8b142bd27f0ec38803814ae388a The package eslint-config-zoo was found to contain malicious code. Source: ghsa-malware...

Malicious code in pp-js-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ef567b818a3642f6a51a1d26f23c897c1ecc73c6e431361ee1512d288ab455 The package pp-js-lib was found to contain malicious code. Source: ghsa-malware ba1fcfff2f6e86511e78c7092763167dfd731beef4f008cc933bf1bb5b4255e1 Any...

MAL-2025-192555 Malicious code in cms_comp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7762e8867157bd05bfa8858e8f90ecd85ed0d6cf08c2435d264b9c61ad3420de The package cmscomp was found to contain malicious code. Source: ghsa-malware e58e38c37e8492486fd771954f0b1906c083a4dd5741600ca28a0bed5dd919a7 Any...

Malicious code in sd-pay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9616f3280e84767be7a4d7eb72057a907816c66dba6104915b31df22260c16f4 The package sd-pay was found to contain malicious code. Source: ghsa-malware a8a08228b2c2618675e777b8bd306f5499f39767b26a7e12deb1dc0ce91175b5 Any...

Malicious code in uba-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcb257605c151aafe2aad5cfe0a574b33989c084ccee06ee6ff0b74c33afb907 The package uba-plugins was found to contain malicious code. Source: ghsa-malware 2a73b282a96cbf09b981101e3b9e4056c51c7d9524e1cf62a41d71ce8f90f36f An...

Malicious code in sd-pay-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7543455a42022174e965eac8f842494f5ad7eb1e0755dfd01035529d63d7a5ff The package sd-pay-ts was found to contain malicious code. Source: ghsa-malware c21a3fe3b0a1df838e4d8b768b5dcc2cf3831bea34c8527fd9e8493ab480bdd7 Any...

MAL-2025-192556 Malicious code in cms_comp_static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e057568833f54e2250c5364e595d7a3046f4eb94f2484b9a0a2236b948cb10f The package cmscompstatic was found to contain malicious code. Source: ghsa-malware 38ce02191cf2d82246d56083ba8f7c2c4c0f14a71060bf8beaea95851f3c7a1e...

Malicious code in cos-js-sdk-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d4e667425231cedc1d2417e80767126bd48fa3afc7cc2bbb14ef6ae45df684 The package cos-js-sdk-v6 was found to contain malicious code. Source: ghsa-malware 8c001845c7ca3a227b7e24858fde28811305d6f37bbf10d84f0fa5276c1d146c...

Malicious code in sdbao-content-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 352174ed8ad21b72357fc69c51e395ee7b1ceb75b55603d205bdc8280dfc00b1 The package sdbao-content-report was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192557 Malicious code in cos-js-sdk-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d4e667425231cedc1d2417e80767126bd48fa3afc7cc2bbb14ef6ae45df684 The package cos-js-sdk-v6 was found to contain malicious code. Source: ghsa-malware 8c001845c7ca3a227b7e24858fde28811305d6f37bbf10d84f0fa5276c1d146c...

Malicious code in sdbao-content-sems (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050ceeb8145a6cac66b0539a7be8d50c66979cd72b54055f3c49c0c40823fd6b The package sdbao-content-sems was found to contain malicious code. Source: ghsa-malware...