MAL-2025-192944 Malicious code in backstage-plugin-glean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824531546cd7527be37fc4aa5ca2020424a1ecf090eaba3a8974105871c0931f The package backstage-plugin-glean was found to contain malicious code. Source: ghsa-malware...

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.8.1 release.

Red Hat Developer Hub 1.8.1 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

EUVD-2025-200119

Gin-vue-admin has an arbitrary file deletion vulnerability...

CVE-2025-66410

Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder...

EUVD-2021-2243

Malware in sbrugna...

EUVD-2021-1324

Malware in sbrugna...

EUVD-2021-2554

Malware in sbrugna...

EUVD-2021-1373

Malware in sbrugna...

EUVD-2021-2600

Malware in sbrugna...

EUVD-2024-3111

Malicious code in bioql PyPI...

EUVD-2024-0471

Malicious code in bioql PyPI...

EUVD-2023-0654

Malicious code in bioql PyPI...

EUVD-2024-2702

Malicious code in bioql PyPI...

EUVD-2024-2705

Malicious code in bioql PyPI...

EUVD-2024-2722

Malicious code in bioql PyPI...

EUVD-2025-11351

Malicious code in bioql PyPI...

EUVD-2024-3501

Malicious code in bioql PyPI...

EUVD-2023-1899

Malicious code in bioql PyPI...

Moderate: Red Hat Security Advisory: Red Hat Developer Hub 1.6.5 release.

Red Hat Developer Hub 1.6.5 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

Malicious code in yarn-plugin-backstage (npm)

The package yarn-plugin-backstage was found to contain malicious code...