MAL-2026-5686 Malicious code in ecto-corsair-flag-x9m4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1e74d04f91a92c7c0205e252bc0002095d0c1ce9b9e9390083d267422e8b10 On npm install, postinstall.js executes attacker logic gated by hostname and working-directory checks designed to fire only inside CTF-style containe...

MAL-2026-5687 Malicious code in ecto-flag-read-m7p2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb2ef2851c6365e6198a67c4d395a1f3e7ca634559651063ce2e3b68a610cd3 The package's postinstall.js imports childprocess and references HTTP GET calls and hostname lookups during the install lifecycle. The co-occurrence ...

Malicious code in ecto-corsair-whisper-6f3b9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8695ea17273c804f1a58e6c0b877de280f7472622065964245deb85cc62dae20 The package declares a postinstall lifecycle hook postinstall.js that runs automatically on npm install. The script shells out via curl to the EC2...

CVE-2026-32687

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in elixir-ecto postgrex 'Elixir.Postgrex.Notifications' module allows SQL Injection. The channel argument passed to 'Elixir.Postgrex.Notifications':listen/3 and...

Malicious code in ecto-spirit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b836667ecfcf9ebf94ca27412a66b50088c2e6dcfffde861a901c2c3fd5678 The package ecto-spirit was found to contain malicious code...

Malicious code in ecto-spirit-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72d3638a38fd250b18d9b93068dc16f07d03d34e87c361a41069ac57740f2629 The package ecto-spirit-core was found to contain malicious code...

MAL-2026-2356 Malicious code in ecto-spirit-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72d3638a38fd250b18d9b93068dc16f07d03d34e87c361a41069ac57740f2629 The package ecto-spirit-core was found to contain malicious code...

MAL-2026-2355 Malicious code in ecto-spirit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b836667ecfcf9ebf94ca27412a66b50088c2e6dcfffde861a901c2c3fd5678 The package ecto-spirit was found to contain malicious code...

Malicious code in ecto-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b394438461d34fc5c46660addaa8e99dad23d16b7050b1e8635fd7c700ae723f The package ecto-registry was found to contain malicious code...

MAL-2026-2354 Malicious code in ecto-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b394438461d34fc5c46660addaa8e99dad23d16b7050b1e8635fd7c700ae723f The package ecto-registry was found to contain malicious code...

MAL-2026-2352 Malicious code in ecto-corsair-lwirz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c3cc1d671c5749806f3787e8d2005f67db4d64f938987e404cea0a52ebac21 The package ecto-corsair-lwirz was found to contain malicious code...

Malicious code in ecto-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a678fddfc2d44cf68ad36ea2ec4225f695540faeefd1e528f65887f3f32555ef The package ecto-engine was found to contain malicious code...

Malicious code in ecto-corsair-lwirz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c3cc1d671c5749806f3787e8d2005f67db4d64f938987e404cea0a52ebac21 The package ecto-corsair-lwirz was found to contain malicious code...

MAL-2026-2353 Malicious code in ecto-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a678fddfc2d44cf68ad36ea2ec4225f695540faeefd1e528f65887f3f32555ef The package ecto-engine was found to contain malicious code...

EUVD-2025-37296

Malicious code in ecto-utils npm...

Malicious code in ecto-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce81e1cdd6102c7565db6c5e0e23b7776c666391fcaf74dd0dda3d9abc4a001f The package ecto-utils was found to contain malicious code...

MAL-2025-49296 Malicious code in ecto-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce81e1cdd6102c7565db6c5e0e23b7776c666391fcaf74dd0dda3d9abc4a001f The package ecto-utils was found to contain malicious code...

EUVD-2023-0331

Malicious code in bioql PyPI...

CVE-2017-20166

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

GHSA-4R2F-6FM9-2QGH Duplicate Advisory: Ecto lacks a protection mechanism

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2xxx-fhc8-9qvq. This link is maintained to preserve external references. Original Description Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...