CVE-2025-68619

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 of the appstore interface allow administrators to install npm packages through a REST API endpoint. While the endpoint validates that the package name exists in the npm registry as a known plugi...

MAL-2025-42034 Malicious code in nmt-admin (npm)

The package nmt-admin was found to contain malicious code...

MAL-2025-38963 Malicious code in web-admin (npm)

The package web-admin was found to contain malicious code...

MAL-2025-4756 Malicious code in pages-admin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in mx-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53bb09097c08dbb2935066fba5cd1b4bb5c50abd404864db6bb6c1119dfdad7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4442 Malicious code in mx-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53bb09097c08dbb2935066fba5cd1b4bb5c50abd404864db6bb6c1119dfdad7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-30827

Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\packageedit.php...

@andrewzagorski/admin (>=4.25.19-patch.2 <=4.25.19-patch.3), @andrewzagorski/pack-up (=4.23.1-prerelease.2) +21 more potentially affected by CVE-2025-31486 via vite (>=6.0.0 <=6.0.11)

vite NPM version =6.0.0, =4.25.19-patch.2, =19.1.5, =5.0.0-alpha.37, =2.11.0, =2.11.0, =11.23.0, =0.0.0-experimental-13bd4c2-20250203-4e3af844, =0.0.0-snapshot-1d99fea7d2ce2c7a5d9ed0a3752f8a7bda6bc3db, =0.0.0-snapshot-1d99fea7d2ce2c7a5d9ed0a3752f8a7bda6bc3db, =1.0.6, =1.0.7 - @tuax/plugin-vite6...

@andrewzagorski/admin (>=4.25.19-patch.2 <=4.25.19-patch.3), @andrewzagorski/pack-up (=4.23.1-prerelease.2) +21 more potentially affected by CVE-2025-31125 via vite (>=6.0.0 <=6.0.11)

vite NPM version =6.0.0, =4.25.19-patch.2, =19.1.5, =5.0.0-alpha.37, =2.11.0, =2.11.0, =11.23.0, =0.0.0-experimental-13bd4c2-20250203-4e3af844, =0.0.0-snapshot-1d99fea7d2ce2c7a5d9ed0a3752f8a7bda6bc3db, =0.0.0-snapshot-1d99fea7d2ce2c7a5d9ed0a3752f8a7bda6bc3db, =1.0.6, =1.0.7 - @tuax/plugin-vite6...

MAL-2025-520 Malicious code in lyft-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d38f448299b8cf08b4e9a13e97a9c14c62534e926734f9f7b65fd051eb22509c The OpenSSF Package Analysis project identified 'lyft-admin' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in google-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1952eda028c50037c3fed98b8477d4d246352476b02989dc4f37d710842bd120 The OpenSSF Package Analysis project identified 'google-admin' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-368 Malicious code in amazon-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d8c0584799a75463d5c130aa96af2f9e2528a3059c901d9172db6f1aa601eadd The OpenSSF Package Analysis project identified 'amazon-admin' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11776 Malicious code in spot-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5266209798ebafe67e3827752a8025acd7d54406e99400930929aee0c6b8e862 The OpenSSF Package Analysis project identified 'spot-admin' @ 0.0.2 npm as malicious. It is considered malicious because: - The package execute...

Malicious code in sap-admin (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-32256

Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via /tms/admin/change-image.php. When updating a current package, there are no checks for what types of files are uploaded from the image...

Malicious code in prova-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 938fc5bb5c8e1be3541bd49183cc6bed9f7683b7d3d547f7273b89117e79d193 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-30827

Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\packageedit.php...

Wedding Management System SQL注入漏洞

Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from the admin/packageedit.php page that lacks The vulnerability is caused by a lack of validation of...

@cao_steven/nb-core (=1.0.0), @dcodegroup-au/dsg-vue (>=0.0.17 <=0.0.18) +85 more potentially affected by CVE-2021-4103 via vditor (>=2.3.1 <=3.3.9)

vditor NPM version =2.3.1, =0.0.17, =2.1.5, =2.1.5, =2.1.5, =2.1.5, =2.1.5, =2.1.5, =2.1.5, =0.0.1, =0.0.2, =0.0.1-beta.15, =0.0.1, =0.0.0, =0.0.24 and more Source cves: CVE-2021-4103 Source advisory: OSV:GHSA-CXM3-V4MV-6MH8...

@peak-stone/vue-admin (>=1.0.1 <=2.1.1) potentially affected by CVE-2019-10745 via assign-deep (=1.0.0)

assign-deep NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on assign-deep and may be impacted: - @peak-stone/vue-admin =1.0.1, =2.1.1 Source cves: CVE-2019-10745 Source advisory: OSV:GHSA-66RH-8FW6-59Q6...