MAL-2025-192934 Malicious code in ing-feat-kyc-consent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ec1565e92d1ecffd4215be59b4dbd0d6a1e91be1511dab5c9b6ece1c202507 The package ing-feat-kyc-consent was found to contain malicious code. Source: ghsa-malware...

Malicious code in ing-feat-kyc-consent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ec1565e92d1ecffd4215be59b4dbd0d6a1e91be1511dab5c9b6ece1c202507 The package ing-feat-kyc-consent was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192933 Malicious code in ing-feat-auth-idin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55080ac00ebd2c937db80d93324226b3fbb9dda607619f44d94dd4c09a8ba0fc The package ing-feat-auth-idin was found to contain malicious code. Source: ghsa-malware...

Malicious code in ing-feat-auth-idin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55080ac00ebd2c937db80d93324226b3fbb9dda607619f44d94dd4c09a8ba0fc The package ing-feat-auth-idin was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192935 Malicious code in ing-feat-mortgage-consent-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 626d72f10b630f53b78e042906e6724ca662099bfc31e82310575ea19452576f The package ing-feat-mortgage-consent-starter was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in ing-feat-mortgage-consent-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 626d72f10b630f53b78e042906e6724ca662099bfc31e82310575ea19452576f The package ing-feat-mortgage-consent-starter was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in ing-feat-pis-single-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94bc97753b6e7a9fa1430482f3266bf40e985ab97ef48bbd35a8d7fd8f404ca6 The package ing-feat-pis-single-payments was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in cc-raiesy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9156cfe8712328dc4de944c470b2da3184bc49c1c444febc9eccf20f1fd962f The package cc-raiesy was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in livekit-agents-hedra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8391aaa11b2ae78ceba6cf6eea7b0671d2d21b32d838b94f4504afa13ea832ce Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in cloudy-uvi-sense-v11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff56869fcef2b46c119633fc140a8c99af63e3e4a7e05c5e75f3fc64213dbeb2 The package cloudy-uvi-sense-v11 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192691 Malicious code in cloudy-uvi-sense-v11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff56869fcef2b46c119633fc140a8c99af63e3e4a7e05c5e75f3fc64213dbeb2 The package cloudy-uvi-sense-v11 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192688 Malicious code in utif-updated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ed42240868e0b6b0eff870ffa0f42d95bca3659f922078257f1a71694da3f1 The package utif-updated was found to contain malicious code. Source: ghsa-malware 3d854467203e61d8d828eafa2a699ba639c90e4045f0e92f033fdade35096cac A...

Malicious code in commander-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fe1eb016adcd74c343cd1628168fca4112c383c79d2e8580aa81b80a3d162f The package commander-stable was found to contain malicious code. Source: ghsa-malware d960435ff1d49dae38d3390836ed2ea98d8952b423ab906c750127f7c6bc02...

MAL-2025-192687 Malicious code in commander-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fe1eb016adcd74c343cd1628168fca4112c383c79d2e8580aa81b80a3d162f The package commander-stable was found to contain malicious code. Source: ghsa-malware d960435ff1d49dae38d3390836ed2ea98d8952b423ab906c750127f7c6bc02...

Malicious code in jest-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02daf523039c3df603f4e65bf270eab31b72c3d891d9be87a53c99c77950bfa The package jest-stable was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192678 Malicious code in jest-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02daf523039c3df603f4e65bf270eab31b72c3d891d9be87a53c99c77950bfa The package jest-stable was found to contain malicious code. Source: ossf-package-analysis...

PT-2025-52430

A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Page Templates feature. A crafted payload can be stored as the template name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time the affected...

Malicious code in raven-hubspot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273a299e42e423bb2ac50f586ff57f8e869843110509c6d0e50b62dd9e91c228 The package raven-hubspot was found to contain malicious code. Source: ghsa-malware 6f62a48e9794e44ec492f8e1951f61f7953e08d5217b220ebcdea64d076a9d57...

MAL-2025-192597 Malicious code in raven-hubspot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273a299e42e423bb2ac50f586ff57f8e869843110509c6d0e50b62dd9e91c228 The package raven-hubspot was found to contain malicious code. Source: ghsa-malware 6f62a48e9794e44ec492f8e1951f61f7953e08d5217b220ebcdea64d076a9d57...

Malicious code in jsondatatoruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f78392e9a3a510c3e509f058c49aff59b8b98fff6beca0f5f30bbb8e85a9bd The package jsondatatoruby was found to contain malicious code. Source: ossf-package-analysis...