Malicious code in checkout-parameters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0cff223506622cf77c0c0c038390701fbc4dfa3bb8a1be146263a9eede7774 On require'checkout-parameters', index.js loads vendor.js which downloads a platform-specific native binary from obfuscated hosts and executes it on...

MAL-2026-12583 Malicious code in checkout-parameters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0cff223506622cf77c0c0c038390701fbc4dfa3bb8a1be146263a9eede7774 On require'checkout-parameters', index.js loads vendor.js which downloads a platform-specific native binary from obfuscated hosts and executes it on...

CVE-2026-47198

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.1, the checkout component improperly filters URL-writable properties, allowing authenticated users to inject arbitrary key-value pairs into server provisioning parameters. Because...

GHSA-5Q4Q-834J-G8G4 Paymenter has URL parameter injection that bypasses paid plan limits at checkout

Summary The checkout component improperly filters URL-writable properties, allowing authenticated users to inject arbitrary key-value pairs into server provisioning parameters. Because bundled server extensions prioritize these user-supplied properties over administrator-defined configurations, a...