Malicious code in thistle-infinity-eah976-project (npm)

The package thistle-infinity-eah976-project was found to contain malicious code...

MAL-2025-23202 Malicious code in infinity-rainbow-lfq530-project (npm)

The package infinity-rainbow-lfq530-project was found to contain malicious code...

Malicious code in cascade-infinity-ahh628-project (npm)

The package cascade-infinity-ahh628-project was found to contain malicious code...

MAL-2025-37598 Malicious code in ui-select-infinity-master (npm)

The package ui-select-infinity-master was found to contain malicious code...

MAL-2025-23203 Malicious code in infinity-river-xpr242-project (npm)

The package infinity-river-xpr242-project was found to contain malicious code...

Malicious code in saturn-infinity-eic765-project (npm)

The package saturn-infinity-eic765-project was found to contain malicious code...

MAL-2025-40904 Malicious code in zephyr-infinity-vya854-project (npm)

The package zephyr-infinity-vya854-project was found to contain malicious code...

MAL-2025-23199 Malicious code in infinity-iceberg-pxa717-project (npm)

The package infinity-iceberg-pxa717-project was found to contain malicious code...

MAL-2025-16584 Malicious code in cascade-infinity-ahh628-project (npm)

The package cascade-infinity-ahh628-project was found to contain malicious code...

MAL-2025-23200 Malicious code in infinity-lightning-lij114-project (npm)

The package infinity-lightning-lij114-project was found to contain malicious code...

Malicious code in spruce-infinity-qym565-project (npm)

The package spruce-infinity-qym565-project was found to contain malicious code...

MAL-2025-23204 Malicious code in infinity-sunset-qsh049-project (npm)

The package infinity-sunset-qsh049-project was found to contain malicious code...

MAL-2025-24555 Malicious code in kite-infinity-lub379-project (npm)

The package kite-infinity-lub379-project was found to contain malicious code...

MAL-2025-23201 Malicious code in infinity-peacock-qvy720-project (npm)

The package infinity-peacock-qvy720-project was found to contain malicious code...

Malicious code in kiwi-infinity-xlz814-project (npm)

The package kiwi-infinity-xlz814-project was found to contain malicious code...

MAL-2025-14258 Malicious code in albatross-infinity-erv465-project (npm)

The package albatross-infinity-erv465-project was found to contain malicious code...

SUSE CVE-2025-8341

Grafana is an open-source platform for monitoring and observability. The Infinity datasource plugin, maintained by Grafana Labs, allows visualizing data from JSON, CSV, XML, GraphQL, and HTML endpoints. If the plugin was configured to allow only certain URLs, an attacker could bypass this...

GO-2025-3843 Grafana Infinity Datasource Plugin SSRF Vulnerability in github.com/grafana/grafana-infinity-datasource

Grafana Infinity Datasource Plugin SSRF Vulnerability in github.com/grafana/grafana-infinity-datasource...

The vulnerability of the visualization plugin for the Infinity Datasource platform used in Grafana monitoring and observation systems stems from server-side request manipulation. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Infinity Datasource plugin for the Grafana monitoring and observation platform relates to server-side request manipulation. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

CVE-2025-8341

A flaw was found in github.com/grafana/grafana-infinity-datasource. The Infinity datasource plugin incorrectly handles configuration when restricted to certain data sources, allowing an attacker to potentially trigger an out-of-bounds read. This vulnerability allows a remote attacker to manipulat...