Command Injection

Overview browserstack-local is a Nodejs bindings for BrowserStack Local Affected versions of this package are vulnerable to Command Injection via the logfile variable in lib/Local.js. An attacker can execute arbitrary operating system commands by supplying crafted input to this variable. This is...

CVE-2025-57283

The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js...

CVE-2025-57283

The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js...

CVE-2025-57283

The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js...

org.jenkins-ci.main:jenkins-war (1.653), org.jenkins-ci.main:test (1.653) +9 more potentially affected by CVE-2025-67637 via org.jenkins-ci.main:jenkins-core (1.653)

org.jenkins-ci.main:jenkins-core MAVEN version 1.653 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.653 - org.jenkins-ci.main:test 1.653 -...

org.jenkins-ci.main:jenkins-war (1.653), org.jenkins-ci.main:test (1.653) +9 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.653)

org.jenkins-ci.main:jenkins-core MAVEN version 1.653 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.653 - org.jenkins-ci.main:test 1.653 -...

Malicious Package

Overview node-js-playwright-browserstack is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

MAL-2025-48744 Malicious code in node-js-playwright-browserstack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1641207c93032c94f176032bea4a9fc81eecc63bf9340ebc483585378afdb939 Any computer that has this package installed or running should be considered...

Malicious code in node-js-playwright-browserstack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1641207c93032c94f176032bea4a9fc81eecc63bf9340ebc483585378afdb939 Any computer that has this package installed or running should be considered...

org.jenkins-ci.main:jenkins-war (1.653), org.jenkins-ci.main:test (1.653) +9 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.653)

org.jenkins-ci.main:jenkins-core MAVEN version 1.653 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.653 - org.jenkins-ci.main:test 1.653 -...

Malicious code in cucumber-js-browserstack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2f1891754984c705408dd02f9fb37660e1d4d84780ad4be25a83910d1eb789d Any computer that has this package installed or running should be considered...

Malicious Package

Overview cucumber-js-browserstack is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2025-47304 Malicious code in cucumber-js-browserstack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2f1891754984c705408dd02f9fb37660e1d4d84780ad4be25a83910d1eb789d Any computer that has this package installed or running should be considered...

Malware in cucumber-js-browserstack

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

io.jenkins.blueocean:blueocean-git-pipeline (>=1.2.0-beta-5, <=1.2.4), io.jenkins.blueocean:blueocean-pipeline-scm-api (>=1.2.0-beta-5, <=1.3.6) +2 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.39)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean-git-pipeline =1.2.0-beta-5, =1.2.0-beta-5...

com.aspectsecurity.automationservices.plugins.jenkins:ibm-security-appscansource-scanner (>=1.0.3, <=1.0.5), com.blazemeter.plugins:blazemeterjenkinsplugin (>=2.7, <=4.18) +195 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.580.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.580.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.aspectsecurity.automationservices.plugins.jenkins:ibm-security-appscansource-scanner...

com.browserstack:browserstack-integration (1.0.0), org.jenkins-ci.plugins:browserstack-integration (>=1.0.1, <=1.1.1) potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.8)

org.jenkins-ci.plugins:credentials MAVEN version 1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.browserstack:browserstack-integration 1.0.0 -...

Malicious code in browserstack-docker-example (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1842 Malicious code in browserstack-docker-example (npm)

--- -= Per source details. Do not edit below this line.=-...

org.biouno:uno-choice (>=2.0, <=2.1), org.jenkins-ci.plugins.workflow:workflow-cps (2.39) +2 more potentially affected by CVE-2024-34145 via org.jenkins-ci.plugins:script-security (1.31)

org.jenkins-ci.plugins:script-security MAVEN version 1.31 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.biouno:uno-choice =2.0, =1.1.2, =1.14, =1.16 Source cves: CVE-2024-34145 Source...