Malicious code in umap-wasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92fe0d08b117ec6e7dcd48b13025326c2f427f3251c624867c9f0d398bd2dab8 The package umap-wasm was found to contain malicious code. Source: ghsa-malware a8b9419bdb44fab11a3bade4b4831308972f0fc3acfd3472c362fe672339e8ab Any...

MAL-2025-191492 Malicious code in umap-wasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92fe0d08b117ec6e7dcd48b13025326c2f427f3251c624867c9f0d398bd2dab8 The package umap-wasm was found to contain malicious code. Source: ghsa-malware a8b9419bdb44fab11a3bade4b4831308972f0fc3acfd3472c362fe672339e8ab Any...

Malicious code in babel-plugin-standalone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b4d55e36c2dc9ae1b9f1be19b7df14b24b6911fd72498d6d336565a94cea59f The package babel-plugin-standalone was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191491 Malicious code in babel-plugin-standalone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b4d55e36c2dc9ae1b9f1be19b7df14b24b6911fd72498d6d336565a94cea59f The package babel-plugin-standalone was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191494 Malicious code in wds-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 827b1d3e49cfad3ca5aa4eeb1a7afedc234ed734e13948ba28b0e3b3b71180cc The package wds-icons was found to contain malicious code. Source: ghsa-malware 24d19b105cd9931a78806b2c2f9a30d8ef982b16e1ed4620c185a75dbbbf610d Any...

MAL-2025-191490 Malicious code in com.unity.sharp-zip-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cedde339d72e05699d5f33d7c16779f926f419baded72d7cd78d2610395cc807 The package com.unity.sharp-zip-lib was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191489 Malicious code in liblynxtextra.so (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f3e98410431dc81bb4dab16130bd1e591d2f8cce684db9fb654132ce96e5fe The package liblynxtextra.so was found to contain malicious code. Source: ghsa-malware b505f2aa1ba3b64eb6dbe55e16172a887bc2b61007ef602d5bce8ce2d1ab28...

Malicious code in liblynxtextra.so (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f3e98410431dc81bb4dab16130bd1e591d2f8cce684db9fb654132ce96e5fe The package liblynxtextra.so was found to contain malicious code. Source: ghsa-malware b505f2aa1ba3b64eb6dbe55e16172a887bc2b61007ef602d5bce8ce2d1ab28...

MAL-2025-191488 Malicious code in eslint-plugin-react-hooks-published (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647dedd2c8ea8a9cef54b85666b74459095d17369da310d54a0c1960f87dafe6 The package eslint-plugin-react-hooks-published was found to contain malicious code. Source: ghsa-malware...

Malicious code in chain-selectors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb7c7965dde4649d4adda7307f395134f22ed654c9a20b2c7dc9ea1b0c1dad9 The package chain-selectors was found to contain malicious code. Source: ghsa-malware 5632dc92ff1221e72c077781c43c1482a1a40fd5c703f95dd209890a4aa7941...

MAL-2025-191487 Malicious code in chain-selectors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb7c7965dde4649d4adda7307f395134f22ed654c9a20b2c7dc9ea1b0c1dad9 The package chain-selectors was found to contain malicious code. Source: ghsa-malware 5632dc92ff1221e72c077781c43c1482a1a40fd5c703f95dd209890a4aa7941...

Malicious code in vitest-environment-jsdom-patched (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e0d8ae07807d73026bd13988c3341aecf8375b53ae436d03f80110884c5d84e The package vitest-environment-jsdom-patched was found to contain malicious code. Source: ghsa-malware...

Malicious code in x402-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37b562070e10c7c2cf1ae07233d0e676a9c3808a2425407b709e9d03ab981f8 The package x402-legacy was found to contain malicious code. Source: ghsa-malware e93ea6b10273adfc3bd24ad98240fa9d023af96eb7a7c4a5a2073e881140808f An...

MAL-2025-191485 Malicious code in x402-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37b562070e10c7c2cf1ae07233d0e676a9c3808a2425407b709e9d03ab981f8 The package x402-legacy was found to contain malicious code. Source: ghsa-malware e93ea6b10273adfc3bd24ad98240fa9d023af96eb7a7c4a5a2073e881140808f An...

CVE-2025-62354

Improper neutralization of special elements used in an OS command 'command injection' in Cursor allows an unauthorized attacker to execute commands that are outside of those specified in the allowlist, resulting in arbitrary code execution...

MAL-2025-191479 Malicious code in chia-gaming-lobby-connection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54adc68041a37b745f5dd254458f4a92981e5954641131ac846256b6d4ab7f6c The package chia-gaming-lobby-connection was found to contain malicious code. Source: ghsa-malware...

VulnCheck KEV: CVE-2025-8943

The Custom MCPs feature is designed to execute OS commands, for instance, using tools like npx to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls RBAC. Furthermore, in Flowise versions before 3.0.1 the...

ASUS Router Command Injection Vulnerability

ASUS Router is a router product and accompanying management application from ASUS, primarily used for wireless connectivity and management of home and business networks. A command injection vulnerability exists in ASUS Router, which can be exploited by an attacker to cause the device to execute...

📄 Flowise 3.0.4 Code Injection

Flowise versions 3.0.4 and below suffer from a remote command injection vulnerability. ============================================================================================================================================= | Title : Flowise 3.0.4 php code injection | | Author : indoushka | ...

willitmerge has a Command Injection vulnerability

willitmerge describes itself as a command line tool to check if pull requests are mergeable. There is a Command Injection vulnerability in version [email protected]. Resources: Project's GitHub source code: https://github.com/shama/willitmerge/ Project's npm package:...