PT-2025-49769

Name of the Vulnerable Software and Affected Versions SAP Solution Manager affected versions not specified Description SAP Solution Manager is susceptible to a code injection issue stemming from inadequate input sanitation. An authenticated attacker can inject malicious code when invoking a...

Malicious code in tailwindcss-setfont (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f910baae4eb0176c7c1c4b6bde6db28967b1f8674784e8953fe7abb47d7730a4 The package tailwindcss-setfont was found to contain malicious code. Source: ghsa-malware...

Vegeta_Vuln_lab

VegetaVulnlab Overview This lab focuses on core penetrati...

Malicious code in react-animated-glow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c046e67371a339da9e3c12d108f16059eb5eed933f54d51b3429a77effdcdf8a The package react-animated-glow was found to contain malicious code. Source: ghsa-malware...

CVE-2025-66262

Arbitrary File Overwrite via Tar Extraction Path Traversal in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Tar extraction with -C / allow arbitrary file overwrite via crafted archive...

MAL-2025-191371 Malicious code in @voiceflow/secrets-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 527df6a20822831f2bc2435e1db61fcc192d163d6a81240078e8e93066dc1235 The package @voiceflow/secrets-provider was found to contain malicious code. Source: ghsa-malware...

Malicious code in @alexadark/gatsby-theme-wordpress-blog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110819ca12a8190932562305cd8ee1c97b0e61434f5e12e238bc9eaa46350de5 The package @alexadark/gatsby-theme-wordpress-blog was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191439 Malicious code in unadapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909f7edee5bdbb572f7a49086e9d07b3de659aba6eec46149d795293e66f6c1e The package unadapter was found to contain malicious code. Source: ghsa-malware 9a3296cbe10427af96d873c98d866b062f727dfdecd5873ed7bf0b5bb501cb40 Any...

Malicious code in tiptap-shadcn-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0749b2f0cf2a55c1736c46b2865d3ac1dfd6bf241b5242225513d0807ee512e The package tiptap-shadcn-vue was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191315 Malicious code in @silgi/module-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dcdf459dd6f30b49693265bec20c40b3a8f9b49a11f1eef906e86ecc5741ad The package @silgi/module-builder was found to contain malicious code. Source: ghsa-malware...

Malicious code in @silgi/graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0404f9aa498b1721d9dfffbbd0f41cb66d195675fa5a3b9e71fec42153b0e9 The package @silgi/graphql was found to contain malicious code. Source: ghsa-malware 131ca7201ac4ce3abb97a2f5940ad11186f384fb0190ddcaf14d36be20ea0d95...

Malicious code in @oku-ui/accordion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec6f4c235626fe3582ef43941e8a0317b4c3b66acee5e40dae2d246214db38e9 The package @oku-ui/accordion was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191085 Malicious code in easypanel-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ac9db35167e3722d383a2c76a094d96d19c1097508758bccde5c8a5445550bd The package easypanel-sdk was found to contain malicious code. Source: ghsa-malware fdce617dc7f1837495fa0e90e3ac7d214b335c36893c9f97d749e28949d361d3...

Malicious code in victoria-wallet-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924849bafc2cba1cd7f57e91e4081641157914e17ec847844133b3b281afebcd The package victoria-wallet-core was found to contain malicious code. Source: ghsa-malware...

Malicious code in docusaurus-plugin-vanilla-extract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2659e389b89fcdf1fe723b544962764d4f2881cae9694dc4107fbbb4ec077328 The package docusaurus-plugin-vanilla-extract was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190955 Malicious code in designstudiouiux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b36c1311e04a95981cee366a30d6aee0dd7f15421166231abbba74f617035927 The package designstudiouiux was found to contain malicious code. Source: ghsa-malware 0fd8a6a7d5cef9c71c739d05d4e75644f2a303bcae6db5f3b32680d2fc5627...

Malicious code in @ensdomains/ens-test-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3393f85554fe6141b0f72e2f23d0940b102522348e71f60d407dc1471de8f6a9 The package @ensdomains/ens-test-env was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190811 Malicious code in @ensdomains/server-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94dd4c8b8f01e631a4c2d9a19e272458d58a22a5a20c89b97603a94e2b68c4a3 The package @ensdomains/server-analytics was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190839 Malicious code in create-hardhat3-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a1dad1ef411b38a2b87787581837e9c9f5a26fff790d14057d04ca67c06ddc The package create-hardhat3-app was found to contain malicious code. Source: ghsa-malware...

Malicious code in manual-billing-system-miniapp-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbe247429665dfb3140f405fe662a2c53590e8be9cfeca89a868c826a4fe04f The package manual-billing-system-miniapp-api was found to contain malicious code. Source: ghsa-malware...