Malicious code in @zalastax/nolb-ease (npm)

The package @zalastax/nolb-ease was found to contain malicious code. --- Credit: OpenSSF source...

cookie-parser-es (>=1.0.7, <=1.0.8) potentially affected by unknown CVE via set-cookie-ease (1.1.5)

set-cookie-ease NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on set-cookie-ease and may be impacted: - cookie-parser-es =1.0.7, =1.0.8 Source cves: unknown CVE Source advisory: GHSA-9CVH-X7WF-82V8...

Malicious code in set-cookie-ease (npm)

Source: amazon-inspector b2bf656ba38b4d951239ee29799f510de4a8cb93fcf5d8005db4cd679a8631e6 Package masquerades as js-cookie same banner /! js-cookie v3.0.5 | MIT /, README, and repository.url: git://github.com/js-cookie/js-cookie.git but diverges in dist/cookie.ease.js. At lines 46-49, the...

Malicious code in cookie-parser-es (npm)

Source: amazon-inspector b33910f1e874310521f231a698952504d94e6fbdb08ef9d43e02ee220afc18b1 Package name and metadata impersonate the widely-used cookie-parser middleware: README, API surface, and package.json author TJ Holowaychuk and repository expressjs/js-cookie-parser are copied from the...

Malicious code in cookie-js-ease (npm)

Source: amazon-inspector 2908ef4ab9f019d4675b39066f876acb959cd9814b47bb66f8f4554c517abe0d [email protected] impersonates the popular js-cookie library same repository URL, banner comment, API surface, and reused upstream author name 'Klaus Hartl' but adds axios and request as runtime...

Malicious code in cookie-parser-js (npm)

Source: amazon-inspector c6c2bd7c1b5b363e72753401f6edebf816965a625227e6523210e4620ce9bb8a cookie-parser-js impersonates the widely used cookie-parser package: it copies TJ Holowaychuk / Doug Wilson author metadata, the description, the README which self-identifies as cookie-parser-ease, and the...

Malicious code in cookie-parser-es (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33910f1e874310521f231a698952504d94e6fbdb08ef9d43e02ee220afc18b1 Package name and metadata impersonate the widely-used cookie-parser middleware: README, API surface, and package.json author TJ Holowaychuk and...

MAL-2026-10059 Malicious code in cookie-parser-es (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33910f1e874310521f231a698952504d94e6fbdb08ef9d43e02ee220afc18b1 Package name and metadata impersonate the widely-used cookie-parser middleware: README, API surface, and package.json author TJ Holowaychuk and...

MAL-2026-10060 Malicious code in cookie-parser-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c2bd7c1b5b363e72753401f6edebf816965a625227e6523210e4620ce9bb8a cookie-parser-js impersonates the widely used cookie-parser package: it copies TJ Holowaychuk / Doug Wilson author metadata, the description, the...

Malicious code in cookie-parser-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c2bd7c1b5b363e72753401f6edebf816965a625227e6523210e4620ce9bb8a cookie-parser-js impersonates the widely used cookie-parser package: it copies TJ Holowaychuk / Doug Wilson author metadata, the description, the...

Malicious code in cookie-ease (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e657448e95c84051d3c103da0e4bd744f5bc6cbbeedad66099d1ecf4681a65d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6812 Malicious code in cookie-ease (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e657448e95c84051d3c103da0e4bd744f5bc6cbbeedad66099d1ecf4681a65d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

cookie-parser-ease (1.0.7) potentially affected by unknown CVE via cookie-ease (0.0.1-security)

cookie-ease NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on cookie-ease and may be impacted: - cookie-parser-ease 1.0.7 Source cves: unknown CVE Source advisory: SNYK:JS-COOKIEEASE-17824388...

Malicious Package

Overview cookie-ease is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malware in cookie-ease

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2026-47205

A flaw was found in Envoy's extauthz HTTP filter. A use-after-free vulnerability exists when processing per-route authorization overrides concurrently with rapid downstream client disconnects. This can lead to a segmentation fault and denial of service. Mitigation Mitigation for this issue is...

cookie-parser-es (>=1.0.7, <=1.0.8) potentially affected by unknown CVE via set-cookie-ease (1.1.5)

set-cookie-ease NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on set-cookie-ease and may be impacted: - cookie-parser-es =1.0.7, =1.0.8 Source cves: unknown CVE Source advisory: OSV:MAL-2026-6500...

[SECURITY] Fedora 44 Update: python-requests-2.33.1-1.fc44

Most existing Python modules for sending HTTP requests are extremely verbose and cumbersome. Python=E2=80=99s built-in urllib2 module provides most of the HTTP capabilities you should need, but the API is thoroughly broken. This library is designed to make HTTP requests easy for developers...

CVE-2019-25617

Ease Audio Converter 5.30 contains a denial of service vulnerability in the Audio Cutter function that allows local attackers to crash the application by processing malformed MP4 files. Attackers can create a crafted MP4 file containing an oversized buffer and load it through the Audio Cutter...

CVE-2019-25617 Ease Audio Converter 5.30 Denial of Service via Audio Cutter

Ease Audio Converter 5.30 contains a denial of service vulnerability in the Audio Cutter function that allows local attackers to crash the application by processing malformed MP4 files. Attackers can create a crafted MP4 file containing an oversized buffer and load it through the Audio Cutter...