MAL-2025-14509 Malicious code in andromeda-child-process-local-firebase (npm)

The package andromeda-child-process-local-firebase was found to contain malicious code...

MAL-2025-25658 Malicious code in luminescence-hexo-firebase-kuiperbelt (npm)

The package luminescence-hexo-firebase-kuiperbelt was found to contain malicious code...

MAL-2025-18667 Malicious code in dotenv-safe-firebase-uninstall-innercore (npm)

The package dotenv-safe-firebase-uninstall-innercore was found to contain malicious code...

Malicious code in queue-firebase (npm)

The package queue-firebase was found to contain malicious code...

Malicious code in cluster-publish-firebase-module (npm)

The package cluster-publish-firebase-module was found to contain malicious code...

Malicious code in firebase-babel-apollo-dotenv-safe (npm)

The package firebase-babel-apollo-dotenv-safe was found to contain malicious code...

MAL-2025-20587 Malicious code in firebase-queue-client (npm)

The package firebase-queue-client was found to contain malicious code...

MAL-2025-17203 Malicious code in cluster-publish-firebase-module (npm)

The package cluster-publish-firebase-module was found to contain malicious code...

Malicious code in mailersend-firebase (npm)

The package mailersend-firebase was found to contain malicious code...

Malicious code in cordova-plugin-firebase-lovespace (npm)

The package cordova-plugin-firebase-lovespace was found to contain malicious code...

Malicious code in upload-file-to-firebase (npm)

The package upload-file-to-firebase was found to contain malicious code...

Malicious code in firebase-io-taurus-procyon (npm)

The package firebase-io-taurus-procyon was found to contain malicious code...

MAL-2025-20586 Malicious code in firebase-io-taurus-procyon (npm)

The package firebase-io-taurus-procyon was found to contain malicious code...

Malicious code in firebase-queue-client (npm)

The package firebase-queue-client was found to contain malicious code...

MAL-2025-27164 Malicious code in nebula-firebase-queue (npm)

The package nebula-firebase-queue was found to contain malicious code...

MAL-2025-26162 Malicious code in meissa-firebase-equinox-docusaurus (npm)

The package meissa-firebase-equinox-docusaurus was found to contain malicious code...

MAL-2025-31291 Malicious code in queue-firebase (npm)

The package queue-firebase was found to contain malicious code...

MAL-2025-25792 Malicious code in mailersend-firebase (npm)

The package mailersend-firebase was found to contain malicious code...

MAL-2025-17566 Malicious code in cordova-plugin-firebase-lovespace (npm)

The package cordova-plugin-firebase-lovespace was found to contain malicious code...

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength due to the HMAC and RSA key lengths used in the JSON Web Signature JWS implementation not meeting recommended security standards. Remediation Upgrade firebase/php-jwt to version 7.0.0 or higher. References...