Malicious code in sycamore-integration-bravolink (npm)

The package sycamore-integration-bravolink was found to contain malicious code...

Malicious code in sycamore-integration-postcodeanywhere (npm)

The package sycamore-integration-postcodeanywhere was found to contain malicious code...

MAL-2025-14189 Malicious code in airbnb-flow (npm)

The package airbnb-flow was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security cf721a7ab34d44cd6e6bd7fa345aa5926234cdaa069ab71e315ee5780227c2b2 This package installs a dependency hosted on a custom domain that runs an inf...

MAL-2025-24970 Malicious code in launchpad-integration-test (npm)

The package launchpad-integration-test was found to contain malicious code...

MAL-2025-34309 Malicious code in sycamore-integration-bravolink (npm)

The package sycamore-integration-bravolink was found to contain malicious code...

MAL-2025-17032 Malicious code in cimpress-atsquad (npm)

The package cimpress-atsquad was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 121957f49d6a6452b17a35ee2371cebf5f74e232fa821e93229fc5f0b2bd720a This package installs a dependency hosted on a custom domain that runs a...

Malicious code in bananasign-integration (npm)

The package bananasign-integration was found to contain malicious code...

Malicious code in sycamore-integration-kashflow (npm)

The package sycamore-integration-kashflow was found to contain malicious code...

Malicious code in sycamore-integration-freeagent (npm)

The package sycamore-integration-freeagent was found to contain malicious code...

Malicious code in sycamore-integration-basecamp (npm)

The package sycamore-integration-basecamp was found to contain malicious code...

Malicious code in launchpad-integration-test (npm)

The package launchpad-integration-test was found to contain malicious code...

Malicious code in epic-launcher-integration (npm)

The package epic-launcher-integration was found to contain malicious code...

MAL-2025-34314 Malicious code in sycamore-integration-mandrill (npm)

The package sycamore-integration-mandrill was found to contain malicious code...

MAL-2025-40808 Malicious code in zendesk-sell-for-zapier (npm)

The package zendesk-sell-for-zapier was found to contain malicious code...

MAL-2025-15438 Malicious code in bananasign-integration (npm)

The package bananasign-integration was found to contain malicious code...

MAL-2025-32564 Malicious code in run-script-testcafe-eslint-config-palynology (npm)

The package run-script-testcafe-eslint-config-palynology was found to contain malicious code...

MAL-2025-34315 Malicious code in sycamore-integration-postcodeanywhere (npm)

The package sycamore-integration-postcodeanywhere was found to contain malicious code...

MAL-2025-34308 Malicious code in sycamore-integration-basecamp (npm)

The package sycamore-integration-basecamp was found to contain malicious code...

CVE-2025-55192 HomeAssistant-Tapo-Control Code Injection Vulnerability in issues.yml Workflow

HomeAssistant-Tapo-Control offers Control for Tapo cameras as a Home Assistant component. Prior to commit 2a3b80f, there is a code injection vulnerability in the GitHub Actions workflow .github/workflows/issues.yml. It does not affect users of the Home Assistant integration itself — it only impac...

CVE-2025-55192

HomeAssistant-Tapo-Control exposes a code injection vulnerability in its GitHub Actions workflow .github/workflows/issues.yml, prior to commit 2a3b80f. The workflow directly inserts user-controlled content from the issue body (github.event.issue.body) into a Bash conditional without proper saniti...