Malicious code in @g.genie/api-demo-sample-lib4 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain...

CVE-2024-4701 Path Traversal vulnerability via File Uploads in Genie

A path traversal issue potentially leading to remote code execution in Genie for all versions prior to 4.3.18...