Malicious code in zenobia-javascript-transport-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582ed82565cc2459fabf0fc9b1e689521a7becf110b9799fa259ced54307aa9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-janus-javascript-transport (npm)

The package metalsmith-janus-javascript-transport was found to contain malicious code...

MAL-2025-26233 Malicious code in metalsmith-janus-javascript-transport (npm)

The package metalsmith-janus-javascript-transport was found to contain malicious code...

CVE-2022-24771

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure that steals padding bytes and uses...