Malicious code in @alexadark/gatsby-theme-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8516b639c9bdcc54192b6e206090c381522d0f48987715c16f5c68a90ca3b8f4 The package @alexadark/gatsby-theme-events was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191449 Malicious code in @accordproject/markdown-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9047c76812b92b2e951857e7b8b36154b6662c2483ca7528bfa6af593c69c7 The package @accordproject/markdown-cli was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191175 Malicious code in @accordproject/concerto-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d208898af793502494e9b8d4eaa5f6964e2ff49ff7fd50ca8dff9e9e40191313 The package @accordproject/concerto-types was found to contain malicious code. Source: ghsa-malware...

Malicious code in @accordproject/concerto-metamodel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1581131b6f7d752a2f26c167db5c144e33b737febc23f3e156f76a1b68e763ae The package @accordproject/concerto-metamodel was found to contain malicious code. Source: ghsa-malware...

Malicious code in @accordproject/concerto-analysis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd4dfaf2dbfd72597ed98e94903934d34e97ddd5dc4f7aeb7f5450767cb3a34c The package @accordproject/concerto-analysis was found to contain malicious code. Source: ghsa-malware...

Malicious code in @browserbasehq/mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd1d0d39e38fcabc19d825aaf056705056728c59701b5fe8cdf5863839a072b3 The package @browserbasehq/mcp was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191204 Malicious code in @clausehq/flows-step-sendgridemail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e11e222c60736d3fbf0e7d232067bc608dbfdcb99484a13122cd9d2acd27f7 The package @clausehq/flows-step-sendgridemail was found to contain malicious code. Source: ghsa-malware...

Malicious code in @chtijs/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13d42ca03eebf6bafc9addea00583d377c625dfac5eaff226bc3b0a155788c8 The package @chtijs/eslint-config was found to contain malicious code. Source: ghsa-malware...

CVE-2025-64050

A Remote Code Execution RCE vulnerability in the template management component in REDAXO CMS 5.20.0 allows remote authenticated administrators to execute arbitrary operating system commands by injecting PHP code into an active template. The payload is executed when visitors access frontend pages...

MAL-2025-191458 Malicious code in @medusajs/medusa-oas-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48124e119c7f2c21e744172a5901266335824c5ceac7a1c631805772baa3798a The package @medusajs/medusa-oas-cli was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191457 Malicious code in @medusajs/medusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa5b0f943792c37642fca6c2ef986192e352a69adc62d136967da06a71efe27 The package @medusajs/medusa was found to contain malicious code. Source: ghsa-malware 01bb6c10c02f2427b66ecf6036cf38726397291c4de895e6c942bf3cdf78f0...

Malicious code in @lui-ui/lui-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b88c15ab970fa80e2c420db246728871b310f27e35371206322bf8cea6abb1 The package @lui-ui/lui-vue was found to contain malicious code. Source: ghsa-malware 339d88eca55085f7dbfd769a5800adf59a499c0e6e14500a6f456cf17ec249f...

Malicious code in quickswap-smart-order-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a1978f5a844fe2a4875f031a7498db4411fdf687fe752f1dbbcea7a6a31fba The package quickswap-smart-order-router was found to contain malicious code. Source: ghsa-malware...

Malicious code in @kong/spec-renderer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb95018d12b664fc03fb69a58512ad0f479a61403b520ae8b325153404f3e14b The package @kong/spec-renderer was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191405 Malicious code in quickswap-default-staking-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e55808d092f76fd5927721525051ffdb180520c3f2b7ae26fb3d626931c9f9 The package quickswap-default-staking-list was found to contain malicious code. Source: ghsa-malware...

Malicious code in vue-browserupdate-nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b54bd42aca6d571419286ebc95bb3a97c702b62db009f3310494e1d4c8ce081 The package vue-browserupdate-nuxt was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191448 Malicious code in vue-browserupdate-nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b54bd42aca6d571419286ebc95bb3a97c702b62db009f3310494e1d4c8ce081 The package vue-browserupdate-nuxt was found to contain malicious code. Source: ghsa-malware...

Malicious code in valuedex-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7604b9b49dff9ce4a66119dcd337c975d53e669752a1964d523b95bce8b96761 The package valuedex-sdk was found to contain malicious code. Source: ghsa-malware 14bcd330b75ba074bb0ea2ba295bf74570677a718d844ef4f7e18fbd051594da A...

Malicious code in @hapheus/n8n-nodes-pgp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9928cceb0a0a0ad3dbb386bd7f76fffc669c730ec26b54080a69b67bb12ba6f0 The package @hapheus/n8n-nodes-pgp was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191453 Malicious code in @flowfuse/flowfuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22ba60a5d020675e45988b9c85546af27a402e4bdd7667fa7d8a30c7f94063f9 The package @flowfuse/flowfuse was found to contain malicious code. Source: ghsa-malware...