MAL-2025-190512 Malicious code in bcryptkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a480449fe3e91f066e60e8f4ed7d4c85e6915b3c9b2712769c54eac67eefa452 The package bcryptkit was found to contain malicious code. Source: ghsa-malware fabc375d7ac31af2156e2d4ecf33d4e87df80d7b95873af883a10d9c35dfabb9 Any...

Malicious code in dsidospsodlks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb1aad619cb83bf19801c9d9f377a11a0a0f84f6bab77b54a480ab82b4ea976 The package dsidospsodlks was found to contain malicious code. Source: ghsa-malware d8c8352b237d6bf265f491adb9648450fcaa22c21dd3ed14a9656d47a573ba2d...

MAL-2025-190508 Malicious code in integrator-filescrypt2025 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023077b3a9220f828d324d3d9faa0e5dc5cf520b016163672bd5c023284e3039 The package integrator-filescrypt2025 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190507 Malicious code in integrator-2830 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115be0b5028ffab5a29306a2d2d83f0f5f3dc669567f3e0615c37a1d3ebb6181 The package integrator-2830 was found to contain malicious code. Source: ghsa-malware a63fa08d4b3a438ab307f36f34faddc4f6d7f1fa928c42c3ae3318e3384748b...

MAL-2025-190506 Malicious code in integrator-2829 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bcecff983d9f430d14498333405f44d090846f460508f71de76679fb2076e9 The package integrator-2829 was found to contain malicious code. Source: ghsa-malware e38f5e4a7250f8d8199f26a59e70750071a304fc729893e38b7074a1cd3ab50...

Malicious code in applicationooks21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d963ea346580a62502bacede10e72568ab2766e2a79256363a3abf50cc3307 The package applicationooks21 was found to contain malicious code. Source: ghsa-malware...

Malicious code in integrator-filescrypt2025 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023077b3a9220f828d324d3d9faa0e5dc5cf520b016163672bd5c023284e3039 The package integrator-filescrypt2025 was found to contain malicious code. Source: ghsa-malware...

Malicious code in application-phskck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6943455b71ad210483f41c6aad1617346d5cf05804711e7d3c08a94cd5d35084 The package application-phskck was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190505 Malicious code in dsidospsodlks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb1aad619cb83bf19801c9d9f377a11a0a0f84f6bab77b54a480ab82b4ea976 The package dsidospsodlks was found to contain malicious code. Source: ghsa-malware d8c8352b237d6bf265f491adb9648450fcaa22c21dd3ed14a9656d47a573ba2d...

MAL-2025-190511 Malicious code in signals-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d5dc4270646b6f83ba4c0f5f334ec8a5cedd7b16888c9b51a7b3159ddd32ce The package signals-embed was found to contain malicious code. Source: ghsa-malware 9a80ff00c3aa6ab32518f57107ea588aa2da22e76d6db9823783032b89ca146f...

MAL-2025-190503 Malicious code in applicationooks21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d963ea346580a62502bacede10e72568ab2766e2a79256363a3abf50cc3307 The package applicationooks21 was found to contain malicious code. Source: ghsa-malware...

Malicious code in chai-proxify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90af91a26f042c0ac96b72df310de8ec15f6ab93634ff0547c9efb3e041cd15 The package chai-proxify was found to contain malicious code. Source: ghsa-malware 535f2bd89ddae3ece4cde5060e0e237009d5b0cdef1bce1061a3d420915b2e66 A...

MAL-2025-190504 Malicious code in chai-proxify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90af91a26f042c0ac96b72df310de8ec15f6ab93634ff0547c9efb3e041cd15 The package chai-proxify was found to contain malicious code. Source: ghsa-malware 535f2bd89ddae3ece4cde5060e0e237009d5b0cdef1bce1061a3d420915b2e66 A...

MAL-2025-190510 Malicious code in react-native-animated-shine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5050403e37c46819e95b4473ce0825d3dfe40bf8b41941ecd666e9b5048ffb14 The package react-native-animated-shine was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-confetti-modern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a195b8307abbf7a2b6a5d4bd82b65aaad0891e87788e11d1a934707180631c The package react-confetti-modern was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwind-styled-scrollbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac987129deefb5aef175dc25c742373acfa189bdb1511017f6fff95a99e9ceb9 The package tailwind-styled-scrollbar was found to contain malicious code. Source: ghsa-malware...

CVE-2025-11794

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11, 10.12.x = 10.12.0 fail to sanitize user data which allows system administrators to access password hashes and MFA secrets via the POST /api/v4/users/userid/email/verify/member endpoint...

GHSA-MQP8-PGG5-7X7M Mattermost allows system administrators to access password hashes and MFA secrets

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11, 10.12.x = 10.12.0 fail to sanitize user data which allows system administrators to access password hashes and MFA secrets via the POST /api/v4/users/userid/email/verify/member endpoint...

Mattermost allows system administrators to access password hashes and MFA secrets

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11, 10.12.x = 10.12.0 fail to sanitize user data which allows system administrators to access password hashes and MFA secrets via the POST /api/v4/users/userid/email/verify/member endpoint...

EUVD-2025-197607

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11, 10.12.x = 10.12.0 fail to sanitize user data which allows system administrators to access password hashes and MFA secrets via the POST /api/v4/users/userid/email/verify/member endpoint...