CVE-2025-66410

Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder...

PT-2025-48577

Name of the Vulnerable Software and Affected Versions Gin-vue-admin versions prior to 2.8.6 Description Gin-vue-admin, a backstage management system based on vue and gin, is affected by a file deletion issue. Attackers can delete any file on the server, potentially causing damage or unavailabilit...

Malicious code in @kvytech/medusa-plugin-promotion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a466e1f572169367ae23de09311bd07d68a2fb1a6b31c6e3347a8f7305f2e5 The package @kvytech/medusa-plugin-promotion was found to contain malicious code. Source: ghsa-malware...

Malicious code in @voiceflow/base-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f955f868f3684364e34509e8ac923e40a6b84bf081690378886f6a64d77721 The package @voiceflow/base-types was found to contain malicious code. Source: ghsa-malware...

Malicious code in @oku-ui/menu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c596c8e5c233827737327907a4b122e7fc154c1865ba347b975cd3dda7b591a9 The package @oku-ui/menu was found to contain malicious code. Source: google-open-source-security...

Malicious code in @antstackio/shelbysam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b11f3b36cf4d67018deed9546e206b16b8fa148a32c0802a5e8c51998f1c17e The package @antstackio/shelbysam was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191278 Malicious code in @oku-ui/toggle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d0819bf4913c5aabf31547b239ee5407c6e581d71ef7d041451c7f162314c1 The package @oku-ui/toggle was found to contain malicious code. Source: google-open-source-security...

Malicious code in gatsby-plugin-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db5c29950300909f2a9571826a482e10a6ce45dae9529f28ad87ddc2b98119b The package gatsby-plugin-antd was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191377 Malicious code in @voiceflow/stylelint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9df11f1c81595a1f98a654806fb14064550147575b073cc1d049a0ef9f875f The package @voiceflow/stylelint-config was found to contain malicious code. Source: ghsa-malware...

Malicious code in @bdkinc/knex-ibmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85cc012fb765319451923141ad4b7e0436b8033482b80dfd67bcc460923c2ae0 The package @bdkinc/knex-ibmi was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191182 Malicious code in @alexadark/gatsby-theme-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8516b639c9bdcc54192b6e206090c381522d0f48987715c16f5c68a90ca3b8f4 The package @alexadark/gatsby-theme-events was found to contain malicious code. Source: ghsa-malware...

Malicious code in @silgi/drizzle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c2e7d01c383c77ebeddc3e05fac0d15335e412587dc2581a75f3406fdbf8fa The package @silgi/drizzle was found to contain malicious code. Source: ghsa-malware e8e9c9c9355daf84cb6c98baa093fe99abde3b51f58854ac5d4934752d55a9a3...

MAL-2025-191308 Malicious code in @quick-start-soft/quick-remove-image-background (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9fbf3fe9e4ab7de62ad125cf8376c5b6f00b67df5291788b607659981ff021 The package @quick-start-soft/quick-remove-image-background was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191143 Malicious code in react-favic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d4dec5e8464a990814dd2c35d45401414861dd4b227035ae79998c44b05616 The package react-favic was found to contain malicious code. Source: ghsa-malware 5e2a4037034695d45b3b411d0428a55b22920b26b3d5e73f60ed36e8746e9c42 An...

MAL-2025-191098 Malicious code in frontity-starter-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13b1b354fa335b058cf3b6af9fd24bc83609696da8937e6d103a4bdf3196ec2f The package frontity-starter-theme was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191140 Malicious code in piclite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d776815ebc9f644d4e180897c8faecdb8179b86900d868934148989047d6ef55 The package piclite was found to contain malicious code. Source: ghsa-malware 298d5c66cb85081f480bec9e5c38bc7c2d419d609714be7346d3bafb0b2525eb Any...

MAL-2025-190980 Malicious code in next-simple-google-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c0df29a06f4738e26d90f0418c197f39ad60e98981f43cff7baaa82a672ced The package next-simple-google-analytics was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190946 Malicious code in @posthog/drop-events-on-property-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1dee879dbf8f8819008c31e641e4fec6584690087c6929cba530e9171464cb4 The package @posthog/drop-events-on-property-plugin was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191003 Malicious code in react-native-phone-call (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e134ec88971e1ecadce79d1699bde00b798633b1ef9a0f6ebb2dbf67a51cdf5 The package react-native-phone-call was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190971 Malicious code in itobuz-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fcdbc14cc1282398d0aa27b0ada7027ef96a6c2b95c3fcb0fefb926cbb45a0e The package itobuz-angular was found to contain malicious code. Source: ghsa-malware 7bb8d54de22fc55a5690d5bf3b51d9847a98a5dcf0d9836311c615cd6a30b2df...