MAL-2025-192225 Malicious code in elf-stats-nutmeg-stockpile-999 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3dc7edeef3a237ea7dca726f170bdbe2e150c7818ba80f23c7d3ba8f7337906 The package elf-stats-nutmeg-stockpile-999 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-nutmeg-stockpile-999 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3dc7edeef3a237ea7dca726f170bdbe2e150c7818ba80f23c7d3ba8f7337906 The package elf-stats-nutmeg-stockpile-999 was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-20381

In Splunk MCP Server app versions below 0.2.4, a user with access to the "runsplunkquery" Model Context Protocol MCP tool could bypass the SPL command allowlist controls in MCP by embedding SPL commands as sub-searches, leading to unauthorized actions beyond the intended MCP restrictions...

Malicious code in elf-stats-cocoa-ribbon-476 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005ed1613dc4777b86a0449d32f014ea40f1ab9237ebd84bed9d955cdbaefd56 The package elf-stats-cocoa-ribbon-476 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-sleighing-stocking-579 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2697cfcf138d4632b78908e7efa407bc80e1159f5a85f376d6b52c939f9c84 The package elf-stats-sleighing-stocking-579 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192202 Malicious code in elf-stats-sleighing-stocking-579 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2697cfcf138d4632b78908e7efa407bc80e1159f5a85f376d6b52c939f9c84 The package elf-stats-sleighing-stocking-579 was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-57198

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

MAL-2025-191982 Malicious code in elf-stats-ginger-hammer-326 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b381aa5a37f1282740de384eeff72f5f4d3e57918e530d486989909249b8c821 The package elf-stats-ginger-hammer-326 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-191984 Malicious code in elf-stats-sparkly-garland-970 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51b40bdf891b2ad849d25f291b27e11a9c8dcae571ad90c75ee7d7f0696e248 The package elf-stats-sparkly-garland-970 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-nutmeg-chimney-245 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f39faacdb6a0a95dc4e8db69c27bc4a0e06a7b11ac0f6c48bf35d1667cfa1cf The package elf-stats-nutmeg-chimney-245 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-cranberry-sleigh-853 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85ae12d2f730c46ea2549c98a491f8ccccf2c8f7a484258398ce7dad89c137c The package elf-stats-cranberry-sleigh-853 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-rooftop-stockpile-626 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d5b9db53e89ba30430dcab38177cbcd238afa01cd1a5624650e1d695fbd5ae The package elf-stats-rooftop-stockpile-626 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191977 Malicious code in elf-stats-rooftop-stockpile-626 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d5b9db53e89ba30430dcab38177cbcd238afa01cd1a5624650e1d695fbd5ae The package elf-stats-rooftop-stockpile-626 was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-merry-cookiejar-987 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75fe8df281f1f2fce72e4cebd7dc37b97562bc7ca5bd5e5ac7da9d78d6e22cb1 The package elf-stats-merry-cookiejar-987 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-191975 Malicious code in elf-stats-merry-cookiejar-987 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75fe8df281f1f2fce72e4cebd7dc37b97562bc7ca5bd5e5ac7da9d78d6e22cb1 The package elf-stats-merry-cookiejar-987 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-sleighing-bow-514 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffb75cc156e871168a4a171f65cea2e9a8b2290b2151c079594efdd92945f64 The package elf-stats-sleighing-bow-514 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-191976 Malicious code in elf-stats-sleighing-bow-514 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffb75cc156e871168a4a171f65cea2e9a8b2290b2151c079594efdd92945f64 The package elf-stats-sleighing-bow-514 was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-66476

An uncontrolled search-path vulnerability in Vim for Microsoft Windows allows an attacker who can place a trojanized executable in a directory opened by the user to cause Vim to run that executable when Vim invokes external commands for example :grep, :!, filters !, :make, or system in Vimscript...

CVE-2025-12744

A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command docker inspect %s without proper validation. An unprivileged local user can craft a payload that injects shell...

Malicious code in karemm5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b8f1c01b0b1d801421e87d707f28e16c71d39649a5cb21cda5ca7051044f2a The package karemm5 was found to contain malicious code. Source: ossf-package-analysis c93324c96aff01b5bb7f276d1e990c3dc9839738802cc0a7f7cd42103950ec...