MAL-2025-49358 Malicious code in bcryptjs-node-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f621b58cc468b09e5963a64bef46446818cfa742ca51366a9e256bdb6299b8 The package bcryptjs-node-js was found to contain malicious code. Source: ghsa-malware 3b410282355b8584d4b9c012154aed901dfd650f212d1a2a942d901ae693f3...

Improper Input Validation

matrix-js-sdk is vulnerable to Improper Input Validation. The vulnerability is due to inadequate validation in the MatrixClient::getJoinedRooms function, which allows an attacker to replace a tombstoned room with an unrelated attacker-controlled room...

MAL-2025-49315 Malicious code in mbed-js-ble (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46cbc9bfb6de04bcef9b700b14e7b05e13889f71d3fd11d9ba0281cc76d95f39 The package mbed-js-ble was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in mbed-js-ble (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46cbc9bfb6de04bcef9b700b14e7b05e13889f71d3fd11d9ba0281cc76d95f39 The package mbed-js-ble was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in mbed-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37cade9ed9f558086d52e3d4d53a6892f73d271c38ea94d5c0dd25d2a2eee32 The package mbed-js was found to contain malicious code. Source: ossf-package-analysis 09a05d2a84ef02b428f1176efd59cabf7a0b1c55bf4b0d8a2ac97c681ada2d...

MAL-2025-49314 Malicious code in mbed-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37cade9ed9f558086d52e3d4d53a6892f73d271c38ea94d5c0dd25d2a2eee32 The package mbed-js was found to contain malicious code. Source: ossf-package-analysis 09a05d2a84ef02b428f1176efd59cabf7a0b1c55bf4b0d8a2ac97c681ada2d...

Astra Linux – Vulnerability in Node.js

A memory leak could occur when a remote peer abruptly closes the socket without sending a “GOAWAY” notification. Additionally, if an invalid header is detected by nghttp2, causing the connection to be terminated by the peer, the same memory leak will be triggered. This flaw could lead to increase...

EUVD-2025-37133

Malicious code in epic-js-error-reporting npm...

MAL-2025-49160 Malicious code in epic-js-error-reporting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2383bd02db4d187842b44f1880e2a0d88e02f54e8dff17c720e4f1f00138c520 The package epic-js-error-reporting was found to contain malicious code...

Malicious Package

Overview near-abi-client-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview goji-js-org is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

EUVD-2025-36837

Malicious code in firefly-sdk-js npm...

Malicious Package

Overview firefly-sdk-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-49004 Malicious code in firefly-sdk-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa500d2c9575be38d669c176c963359a471ba4af4853d21ba5031d9f8ed93b33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview firefly-shared-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in iot-cardboard-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55bbfa86675a8cd534e3602af7ba1fb1f55c45cf15c8090af9ef87542d107c2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview iot-cardboard-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview binance-connector-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview node-js-playwright-browserstack is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious code in gear-js-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 08293e303cb9ccb253d0503e6c9a51606f052ca75e735030f6985425728f7e69 The OpenSSF Package Analysis project identified 'gear-js-util' @ 1337.1.0 npm as malicious. It is considered malicious because: - The package...