MAL-2026-7302 Malicious code in insomnia-plugin-poctest-null0001 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-6554 Malicious code in insomnia-test-util-m4gester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af3f61639cfac47d91b75ec177ce18a07c29535b0f39806a286093e739494c8 Package ships no functional code and exists solely to execute a shell command on npm install. The postinstall lifecycle hook runs echo PWNEDBYDEEPLIN...

MAL-2026-6552 Malicious code in insomnia-plugin-poc-m4gester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb7024d158c345559d9f130ba3a6b52563328467ec6bb560e196e5c7bc9b955 package.json declares a postinstall lifecycle hook that runs a shell command writing a marker file to /tmp on npm install "postinstall": "echo...

Malicious code in insomnia-smoke-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20f87230976f7fcf435b5b1634ece69387ac24c3965ac13143b99a96269264f The package insomnia-smoke-test was found to contain malicious code...

MAL-2026-2775 Malicious code in insomnia-smoke-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20f87230976f7fcf435b5b1634ece69387ac24c3965ac13143b99a96269264f The package insomnia-smoke-test was found to contain malicious code...

Malicious code in insomnia-scripting-environment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90158c0646becc6150eb35f91ee1745112800326a31fa588807b0de4ac631b95 The package insomnia-scripting-environment was found to contain malicious code...

MAL-2026-2774 Malicious code in insomnia-scripting-environment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90158c0646becc6150eb35f91ee1745112800326a31fa588807b0de4ac631b95 The package insomnia-scripting-environment was found to contain malicious code...

MAL-2026-2773 Malicious code in insomnia-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ef28a051caf1396ddc2679da2de7e5ee5786101e51a8b3b01cab3c68b60235 The package insomnia-api was found to contain malicious code...

Malicious code in insomnia-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ef28a051caf1396ddc2679da2de7e5ee5786101e51a8b3b01cab3c68b60235 The package insomnia-api was found to contain malicious code...

CVE-2025-1353

A vulnerability was found in Kong Insomnia up to 10.3.0 and classified as critical. This issue affects some unknown processing in the library profapi.dll. The manipulation leads to untrusted search path. An attack has to be approached locally. The complexity of an attack is rather high. The...

CVE-2025-1087

Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code. The vulnerability exists due to insufficient validation of user-supplied input when processing template strings, which can lead to arbitrary JavaScript...

MAL-2025-191111 Malicious code in insomnia-plugin-random-pick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8717488a1afc3be853313a0f8f243fa748188c0b321d8c9096182cf59bfbb1ed The package insomnia-plugin-random-pick was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199136

Malicious code in insomnia-plugin-random-pick npm...

Malicious code in insomnia-plugin-random-pick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8717488a1afc3be853313a0f8f243fa748188c0b321d8c9096182cf59bfbb1ed The package insomnia-plugin-random-pick was found to contain malicious code. Source: ghsa-malware...

EUVD-2023-44891

Malicious code in bioql PyPI...

EUVD-2025-2114

Malicious code in bioql PyPI...

EUVD-2025-14165

Malicious code in bioql PyPI...

CVE-2023-40299

Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLDINSERTLIBRARIES environment variable...

CVE-2025-1087

Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code. The vulnerability exists due to insufficient validation of user-supplied input when processing template strings, which can lead to arbitrary JavaScript...

CVE-2025-1087 Arbitrary Code Execution in Kong Insomnia Desktop Application

Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code. The vulnerability exists due to insufficient validation of user-supplied input when processing template strings, which can lead to arbitrary JavaScript...