Malicious code in tinkoff-ui-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c00c178eed539f0535846617d7201e635f073f5f6477d7c9e2d1a6ce53f68d36 On require of the package's main entry, compat.js downloads a platform-specific binary from Cloudflare Workers subdomains whose hostnames are assembl...

aerospike code execution vulnerability

aerospike is a set of Aerospike add-on modules that support multiple operating systems. A security vulnerability exists in aerospike versions prior to 2.4.2 that originates when the program downloads binary resources over the HTTP protocol. A remote attacker could exploit the vulnerability by...