ca.weblite:teavm-lambda-demo-auth (>=0.1.5, <=0.1.6), ca.weblite:teavm-lambda-demo-features (>=0.1.5, <=0.1.6) +244 more potentially affected by CVE-2025-66453 via org.mozilla:rhino (1.7.15)

org.mozilla:rhino MAVEN version 1.7.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.mozilla:rhino and may be impacted: - ca.weblite:teavm-lambda-demo-auth =0.1.5, =0.1.5, =0.1.5, =0.1.5, =0.1.5, =0.1.5, =0.1.1, =0.1.1, =0.1.4, =1.9.0, =2.43.0,...

ca.weblite:teavm-lambda-demo-auth (>=0.1.5, <=0.1.6), ca.weblite:teavm-lambda-demo-features (>=0.1.5, <=0.1.6) +244 more potentially affected by CVE-2025-66453 via org.mozilla:rhino (1.7.15)

org.mozilla:rhino MAVEN version 1.7.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.mozilla:rhino and may be impacted: - ca.weblite:teavm-lambda-demo-auth =0.1.5, =0.1.5, =0.1.5, =0.1.5, =0.1.5, =0.1.5, =0.1.1, =0.1.1, =0.1.4, =1.9.0, =2.43.0,...

Malware in lambda-demo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...