215 matches found
MAL-2026-11143 Malicious code in parallely (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c7ec817d7407cffaa25209d066c7782cd74a1f91ea850887f7d2d85766b5f67 parallely impersonates the concurrently package: package.json copies concurrently's author Kimmo Brunfeldt, repository open-cli-tools/concurrently,...
MiracleLinux 8 : postgresql:13 (AXSA:2024-7568:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-7568:01 advisory. postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL CVE-2024-0985 Tenable has extracted the preceding description block...
CVE-2026-23842
ChatterBot is a machine learning, conversational dialog engine for creating chat bots. ChatterBot versions up to 1.2.10 are vulnerable to a denial-of-service condition caused by improper database session and connection pool management. Concurrent invocations of the getresponse method can exhaust...
EUVD-2025-179610
Malicious code in concurrently-ultra-protractor-paleoceanography npm...
Malicious code in corvus-vuepress-concurrently-elara (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1561f44e67d0868f2fc1f6fbfb73bab11cce44a263ac47614b49c690b618d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177640
Malicious code in neuromorphic-corvus-rate-limiter-concurrently npm...
EUVD-2025-180330
Malicious code in ariel-blitz-rocket-concurrently npm...
EUVD-2025-177395
Malicious code in outercore-cli-concurrently-troposphere npm...
EUVD-2025-179866
Malicious code in cassini-socketio-concurrently-forever npm...
EUVD-2025-179524
Malicious code in cosmos-concurrently-uninstall-jest npm...
EUVD-2025-179615
Malicious code in concurrently-grus-vuepress-zenith npm...
EUVD-2025-179617
Malicious code in concurrently-configstore-lyra-perseus npm...
EUVD-2025-179447
Malicious code in cybernetics-concurrently-testcafe-foundation npm...
MAL-2025-187120 Malicious code in gatsby-config-postgres-concurrently (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da39a9e2fd7a04f5eb662fb6eef0160a78e4ec3832a4537c9e704e0731297736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177032
Malicious code in procyon-futurology-concurrently-sqlite npm...
EUVD-2025-179613
Malicious code in concurrently-janus-equinox-spinner npm...
EUVD-2025-179616
Malicious code in concurrently-fork-blazar-helios npm...
EUVD-2025-179739
Malicious code in child-process-concurrently-chakra-ui-node-sass npm...