Duplicate Advisory: rollbar vulnerable to prototype pollution

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r8c2-2qwq-94p6. This link is maintained to preserve external references. Original Description rollbar is a package designed to effortlessly track and debug errors in JavaScript applications. This package include...

CVE-2025-57325

Summary: Rollbar v2.26.4 and earlier are vulnerable to a Prototype Pollution in the internal function utility.set, allowing an attacker to inject properties into Object.prototype via crafted input, potentially causing a DoS. A fix is available in versions 2.26.5 and 3.0.0-beta5 or newer. The CVE ...

Malicious code in zarabotok-na-kriptovaliute-dlia-nachinaiushchikh-forum-5vff29khr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aedf613f47b3557e94c05e4616c8964f6d4cd5fa415f68cf8695fe4bb8f999bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in linghun-xiangyu-vol1 (npm)

The package linghun-xiangyu-vol1 was found to contain malicious code...

Malicious code in stxnext-blog-zh (npm)

The package stxnext-blog-zh was found to contain malicious code...

MAL-2025-44013 Malicious code in dian-kupang25-breki (npm)

The package dian-kupang25-breki was found to contain malicious code...

Malicious code in @crabas0npm/porro-voluptatum-asperiores-consectetur (npm)

The package @crabas0npm/porro-voluptatum-asperiores-consectetur was found to contain malicious code...

Malicious code in flare-perseus-australis-spica (npm)

The package flare-perseus-australis-spica was found to contain malicious code...

MAL-2025-43240 Malicious code in @zalastax/nolb-fask (npm)

The package @zalastax/nolb-fask was found to contain malicious code...

MAL-2025-43900 Malicious code in cosmiconfig-vortex-proxima-repository (npm)

The package cosmiconfig-vortex-proxima-repository was found to contain malicious code...

MAL-2025-43627 Malicious code in blackgoldpvt (npm)

The package blackgoldpvt was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

...

MAL-2025-6886 Malicious code in solana-spl-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis abc65f4de1b50248d903c79cb67ac016c8da464314e5830c70dbe0a1140503a9 The OpenSSF Package Analysis project identified 'solana-spl-sdk' @ 0.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in zucchini-uns-project (npm)

The package zucchini-uns-project was found to contain malicious code...

Malicious code in @zalastax/nolb-react-io (npm)

The package @zalastax/nolb-react-io was found to contain malicious code...

Malicious code in test-mlw2-cagey-bawds (npm)

The package test-mlw2-cagey-bawds was found to contain malicious code...

Malicious code in geochronology-markdown-jupiter-dotenv-parse-variables (npm)

The package geochronology-markdown-jupiter-dotenv-parse-variables was found to contain malicious code...

Malicious code in @zalastax/nolb-dsr-rollback-w (npm)

The package @zalastax/nolb-dsr-rollback-w was found to contain malicious code...

Malicious code in winston-jest-webdriver-mocha-stream (npm)

The package winston-jest-webdriver-mocha-stream was found to contain malicious code...

Malicious code in new-chi-awk-alert-refactor (npm)

The package new-chi-awk-alert-refactor was found to contain malicious code...