Malicious code in jaetut-varit-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e85e1a4defa66ffea068e9c6df340133d21686f29ad138d73976ff88d60ef368 The package jaetut-varit-test was found to contain malicious code. Source: ghsa-malware...

Malicious code in tcsp-test-vd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f8fd99690655a6e155948c83b8baf3c7d03d10aa4adec3a8e87ed21a96921e The package tcsp-test-vd was found to contain malicious code. Source: ghsa-malware bbc33c9b0da4ee5d72787025ea4a8ca6f7c7b140ba2cb7fa40a3cf6703cb61c8 A...

Malicious code in web-scraper-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dfaccc27abfc21f8c77b6fdf8878b91578a74d08526e6995cc52c2922ca3588 The package web-scraper-mcp was found to contain malicious code. Source: ghsa-malware 836f393eb6f0f8e726f2a49d47785c31473723f76d1f6a6e6e2d6d75e53e5dd...

Malicious code in parse-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6800038c1b56247a0767faecf501d0c74de134197bb0edbae2d27b8a958547 The package parse-session was found to contain malicious code. Source: ghsa-malware 5b04d6ff25ce91de5057fed89547b08687055f2ca7a217a2886eecb79c06f9e9...

CVE-2025-34322

Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature. When this feature is configured, certain user-controlled settings—including model selection and connection parameters—are read from the...

MAL-2025-190557 Malicious code in @grumpycoffeecup/hello-npm-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a093b0e1fa1064f7696cf7ea0b583ffaf5470026f8c5da1613204168b33b09ed The package @grumpycoffeecup/hello-npm-world was found to contain malicious code. Source: ghsa-malware...

Malicious code in chai-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd763492f1ac2f8cf3da33f830d95eb7ea1b0a3c2e2fc03e9b0038dfce25e5c The package chai-type was found to contain malicious code. Source: ghsa-malware a6490275a9d6876c496fa488086d17c0ec0329c4f5f94ee6c061c50fe95c89b1 Any...

MAL-2025-190505 Malicious code in dsidospsodlks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb1aad619cb83bf19801c9d9f377a11a0a0f84f6bab77b54a480ab82b4ea976 The package dsidospsodlks was found to contain malicious code. Source: ghsa-malware d8c8352b237d6bf265f491adb9648450fcaa22c21dd3ed14a9656d47a573ba2d...

Malicious code in rulesdir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c805fe99761f008f2684b4317d760d59a99462becf37b554d6673444045ae3fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-76659 Malicious code in rulesdir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c805fe99761f008f2684b4317d760d59a99462becf37b554d6673444045ae3fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webpack-jsxcompile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1289849e9c1d4556c66e99e25355b9cc16086d11caa692f0832b4799687113e9 The package webpack-jsxcompile was found to contain malicious code. Source: ghsa-malware...

Exploit for CVE-2024-7387

overview cve-2024-7387https://nvd.nist.gov/vuln/detail/C...

Malicious code in bael-god-thanks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb105ca33158c030cf28b649844c05d95a90e00aae8866710025a5ea6ed43a0 The package bael-god-thanks was found to contain malicious code. Source: ghsa-malware 1ada7d14f26d17acaa1f5bc8625c26c9dab2ad3018eeff170305cdd60e45247...

MAL-2025-49268 Malicious code in salli-tg-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9583062e93b42d438d32b28f40f5bdd2df4a4b58978e73345410206944209b The package salli-tg-api was found to contain malicious code. Source: ghsa-malware 7bf68e0aaca553388835f15a3db2f5df6430b9a4419d17a5b89e3be52b62001b A...

CVE-2020-36856 Nagios XI < 5.6.14 Authenticated RCE command_test.php via address

Nagios XI versions prior to 5.6.14 contain an authenticated remote command execution vulnerability in the CCM commandtest.php script. Insufficient validation of the address parameter allows an authenticated user with access to the Core Config Manager to inject shell metacharacters that are...

CVE-2020-36856 Nagios XI < 5.6.14 Authenticated RCE command_test.php via address

Nagios XI versions prior to 5.6.14 contain an authenticated remote command execution vulnerability in the CCM commandtest.php script. Insufficient validation of the address parameter allows an authenticated user with access to the Core Config Manager to inject shell metacharacters that are...

MAL-2025-49071 Malicious code in xo-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44b06297a4f222643e8b7a977e7dfd944c0a2666d5066f0db0a61674b2ea84a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-naming-convention (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f1de3b293c216a9b6c48e3cdb120f41ef3a161e4aaa7be1aa115440108c0f4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48983 Malicious code in ais-sn-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e2dae2da223bd605098cfd095d8e5adea72f0262e1c387f483fe9048a17215e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-migrate-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13c089f283eddbfd2554393c29fc93368e75a6329803352ed0175155f436915f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...