MAL-2025-155350 Malicious code in gri-nutr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c6b9d94716c11c77f68d4a3cfbe811dbd0332ba3cd1cbff1a996fe15180e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-10047 Malicious code in @zalastax/nolb-_gri (npm)

The package @zalastax/nolb-gri was found to contain malicious code...

Malicious code in grape-gri-project (npm)

The package grape-gri-project was found to contain malicious code...

Malicious code in @zalastax/nolb-_gri (npm)

The package @zalastax/nolb-gri was found to contain malicious code...

MAL-2025-21827 Malicious code in grape-gri-project (npm)

The package grape-gri-project was found to contain malicious code...

CVE-2008-7291

gri before 2.12.18 generates temporary files in an insecure way...

CVE-2008-7291

gri before 2.12.18 generates temporary files in an insecure way...

DEBIAN-CVE-2008-7291

gri before 2.12.18 generates temporary files in an insecure way...

CVE-2008-7291

gri before 2.12.18 generates temporary files in an insecure way...

CVE-2008-7291

gri before 2.12.18 generates temporary files in an insecure way...

Code injection

gri before 2.12.18 generates temporary files in an insecure way...

CVE-2008-7291

gri before 2.12.18 generates temporary files in an insecure way...

CVE-2008-7291

gri before 2.12.18 generates temporary files in an insecure way...

CVE-2008-7291

CVE-2008-7291 affects the GRI software, specifically versions before 2.12.18. The root cause is insecure generation of temporary files. The provided documents do not specify the exact impact, exploitation details, or a remediation/workaround. Actions: monitor for updates in the connected sources ...