CVE-2025-67840

CVE-2025-67840 corresponds to multiple authenticated OS command injection vulnerabilities in Cohesity TranZman 4.0 Build 14614 (TZM_1757588060_SEP2025_FULL.depot). The web API endpoints (including Scheduler and Actions) concatenate user-controlled parameters into system commands, allowing an auth...

AVideo has Authenticated Remote Code Execution via Unsafe Plugin ZIP Extraction

Summary An authenticated Remote Code Execution RCE vulnerability was identified in AVideo related to the plugin upload/import functionality. The issue allowed an authenticated administrator to upload a specially crafted ZIP archive containing executable server-side files. Due to insufficient...

MAL-2026-1128 Malicious code in colorize-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f4e60bdcd92f4f5690797fa091f0acb0a463de5c353ded0f6f5e7317a2f84eb The package colorize-console was found to contain malicious code. Source: ghsa-malware a0e5faaa04c5e7d06c634dc2be1f148aa27acb8842f1731dad902bdb3e33d1...

MAL-2026-1119 Malicious code in @nazi-team/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe057f6743744866cb43bc64a47f0b4e814f4de1d503ea59e8b3db6b3880ad00 The package @nazi-team/baileys was found to contain malicious code. Source: ghsa-malware...

Malicious code in @sanzxcode/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bab1682cf8fc2aaa7d7f45b24bd1bf279b1e823e8f1c59f6def120297bccc0 The package @sanzxcode/baileys was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1122 Malicious code in @sanzxcode/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f6946c2edfc02e3a350dd33240e415111649135472f9f5c1d4e22d74fa529d The package @sanzxcode/libsignal-node was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1121 Malicious code in @sanzxcode/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bab1682cf8fc2aaa7d7f45b24bd1bf279b1e823e8f1c59f6def120297bccc0 The package @sanzxcode/baileys was found to contain malicious code. Source: ghsa-malware...

Malicious code in @sanzxcode/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f6946c2edfc02e3a350dd33240e415111649135472f9f5c1d4e22d74fa529d The package @sanzxcode/libsignal-node was found to contain malicious code. Source: ghsa-malware...

Malicious code in @daffadeveloper/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c4d6e1233759183f848159d1b47ee443d914e4ce13251df4518a1a5becdbc6 The package @daffadeveloper/libsignal-node was found to contain malicious code. Source: ghsa-malware...

Malicious code in ngaturkids (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d589b956682ee26f10996c8dd1b6050d8b9e74e7084a46d8f37ab95f7f7fc3fa The package ngaturkids was found to contain malicious code. Source: ghsa-malware 0dc4b2edbc73fc30831d28dd9a701e650e00edefc7938de256932daff4c42577 Any...

Malicious code in danzxz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4833c4fc240e2ee3782998738394ab42ff4d28ba2edcdf9e6aa97e195b12b32e The package danzxz was found to contain malicious code. Source: ghsa-malware 3426bcec6ad873a2aee246f7333e939a481c489dbbdffab631e2f588c421b629 Any...

MAL-2026-1129 Malicious code in danzxz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4833c4fc240e2ee3782998738394ab42ff4d28ba2edcdf9e6aa97e195b12b32e The package danzxz was found to contain malicious code. Source: ghsa-malware 3426bcec6ad873a2aee246f7333e939a481c489dbbdffab631e2f588c421b629 Any...

Malicious code in kazumarii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0c1e0bca3468f71c95be009b3387370179aa6b8ae367dc85626c377d7f4f93 The package kazumarii was found to contain malicious code. Source: ghsa-malware d2e577d88ad909c0835d5690d3d0862a6fcce28d81d92d041b67983f31ac62d8 Any...

Malicious code in npm-doc-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15626b1cc14583363a71f0902fee65350d72abfd562b2681a322a09e484d4940 The package npm-doc-builder was found to contain malicious code. Source: ghsa-malware 5f47c0a224fe1e1e931a1964d52b91b3b92ac7ec0672507a2c143273c8d59fe...

Malicious code in ts-big-number (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644a6ea1bec80a1e6f2dd3ee69a62602237f916e6b2877e126e18d8ef5b7f691 The package ts-big-number was found to contain malicious code. Source: ghsa-malware 490d5033b9169ec80de58a0c2bb8bdbfe435f06200e0b7cc729ce393f2449d40...

Malicious code in @yaoii-bails/socket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d1cc19b4be6f6fb1f29ceb7bedcf05a41ca8135b966956c84c5095c1629126 The package @yaoii-bails/socket was found to contain malicious code. Source: ghsa-malware...

Malicious code in @yaoii-bails/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033f28b021f13dd9d3c9857eaaa63690afd07559c3abd5e9a6a3afc92d6bf435 The package @yaoii-bails/libsignal-node was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1125 Malicious code in @yaoii-bails/libsignall-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5e3f8a6510eddfe59ab8b6e22c62731e2563f000fd76db05ad293e27d14eed6 The package @yaoii-bails/libsignall-node was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1124 Malicious code in @yaoii-bails/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033f28b021f13dd9d3c9857eaaa63690afd07559c3abd5e9a6a3afc92d6bf435 The package @yaoii-bails/libsignal-node was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1123 Malicious code in @yaoii-bails/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1d0d12bd58b983f5d0429e35aabbe5aff4e7206c1198199dff00f8d7edc3c6 The package @yaoii-bails/baileys was found to contain malicious code. Source: ghsa-malware...