EUVD-2025-123866

Malicious code in pegasus-spinner-google-cache npm...

CVE-2025-64178: Server-Side Request Forgery (SSRF)

Jellysweep is a cleanup tool for the Jellyfin media server. In versions 0.12.1 and below, /api/images/cache, used to download media posters from the server, accepted a URL parameter that was directly passed to the cache package, which downloaded the poster from this URL. This URL parameter can be...

Malicious code in delta-phi-pipe-cron-cache (npm)

The package delta-phi-pipe-cron-cache was found to contain malicious code...

MAL-2025-563 Malicious code in meli-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c7d0ea07d51fa1a590737fa0586578db983b776c21cb15f0597463d7046dea8 The OpenSSF Package Analysis project identified 'meli-cache' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-460 Malicious code in godaddy-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e4b08736469d856dfe78c128cfbcefb59951d0162117fd1afbaf672fe4c5c89c The OpenSSF Package Analysis project identified 'godaddy-cache' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-388 Malicious code in apple-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dc09ddd705cb61fae251b9ef88db7a9237d08d212eb332ee3ad9d511ecdebae7 The OpenSSF Package Analysis project identified 'apple-cache' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in klook-node-framework-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4267822732a6d0f193fd615a76cc4ef9c1bf9aeea6a25a63e3a0b68690360e9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MGASA-2017-0155 Updated menu-cache packages fix security vulnerability

Libmenu-cache 1.0.2 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service menu unavailability. CVE-2017-8933...