FireStorePwn

FireStorePwn fsp Escáner de vulnerabilidades de bases de datos Firestore usando APKs fsp escanea un APK y comprueba si la base de datos Firestore tiene reglas que no son seguras, realizando pruebas con o sin autenticación. Si hay problemas con las reglas de seguridad, los atacantes podrían robar,...

Malicious code in 1mi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68ec5fa97918431510ba9ef57d3d601738891094478b5ebf996a3eafa0cb960 This package masquerades as a Cloudflare Worker Telegraf middleware README: 'cfworker-middware-telegraf' but its main module unconditionally forwards...

MAL-2026-3672 Malicious code in 1mi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68ec5fa97918431510ba9ef57d3d601738891094478b5ebf996a3eafa0cb960 This package masquerades as a Cloudflare Worker Telegraf middleware README: 'cfworker-middware-telegraf' but its main module unconditionally forwards...

Malicious Package

Overview firestore-types is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2026-1981

Malicious code in firestore-types npm...

Malicious code in firestore-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f49fdc3a0333a330d1304e9ed3b86ba15d469d01211eb308e3af670ec718ee The package firestore-types was found to contain malicious code. Source: ghsa-malware 9fbe3c1ce15b13f945553f027e3d9181facdc632eb1c9d25a12c570a8fe859e...

MAL-2026-219 Malicious code in firestore-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f49fdc3a0333a330d1304e9ed3b86ba15d469d01211eb308e3af670ec718ee The package firestore-types was found to contain malicious code. Source: ghsa-malware 9fbe3c1ce15b13f945553f027e3d9181facdc632eb1c9d25a12c570a8fe859e...

EUVD-2025-199166

Malicious code in @lpdjs/firestore-repo-service npm...

Malicious code in @lpdjs/firestore-repo-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614b34b1f58e1d1c7bb2affcabf4ea2cc7954cf6d6f5c389b4d535101664531d The package @lpdjs/firestore-repo-service was found to contain malicious code. Source: ghsa-malware...

Malicious code in firestore-search-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13c5bf9a90c4b5043c0ac86fea67792a3688c2d84fb39eb0f2cf28902fe2e78 The package firestore-search-engine was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191092 Malicious code in firestore-search-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13c5bf9a90c4b5043c0ac86fea67792a3688c2d84fb39eb0f2cf28902fe2e78 The package firestore-search-engine was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199221

Malicious code in firestore-search-engine npm...

EUVD-2023-3097

Malicious code in bioql PyPI...

Malicious code in firestore-stripe-invoices (npm)

The package firestore-stripe-invoices was found to contain malicious code...

MAL-2025-20598 Malicious code in firestore-stripe-invoices (npm)

The package firestore-stripe-invoices was found to contain malicious code...

MAL-2025-4435 Malicious code in expo-firestore-upload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 265b76b510b5a24dcbc9d26be8211555349249589a6468e756c32680aebda977 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in expo-firestore-upload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 265b76b510b5a24dcbc9d26be8211555349249589a6468e756c32680aebda977 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-6460

A potential logging of the firestore key via logging within nodejs-firestore exists - Developers who were logging objects through this.settings would be logging the firestore key as well potentially exposing it to anyone with logs read access. We recommend upgrading to version 6.1.0 to avoid this...

Security Bulletin: IBM Maximo Application Suite uses firestore-4.15.1.tgz which is vulnerable to CVE-2023-6460

Summary IBM Maximo Application Suite uses firestore-4.15.1.tgz which is vulnerable to CVE-2023-6460. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2023-6460 DESCRIPTION: Google APIs nodejs-firestore could allow a local authenticate...

Sensitive Information Disclosure

@google-cloud/firestore is vulnerable to Sensitive Information Disclosure. The vulnerability is caused by logging the this.settings object when logging firestore objects like WriteBatch and Transaction etc. This leads to the leakage of the firestore key resulting in sensitive information disclosu...