15 matches found
Malicious code in level-json (npm)
The package level-json was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in level-json-cache (npm)
The package level-json-cache was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in level-json-wrapper (npm)
The package level-json-wrapper was found to contain malicious code. --- Credit: OpenSSF source...
memoize-with-leveldb (>=0.0.0, <=0.0.1), radio-paradise-api (>=0.0.0, <=0.0.1) potentially affected by unknown CVE via level-json-cache (>=0.0.0, <=2.0.0)
level-json-cache NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: GHSA-4J89-3RVJ-P73M...
level-json-cache (0.0.0), midibin-api (0.0.0) +6 more potentially affected by unknown CVE via level-json (>=0.0.2, <=2.0.0)
level-json NPM version =0.0.2, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.2.6 Source cves: unknown CVE Source advisory: GHSA-Q99X-VCQM-87V5...
level-json (>=0.0.4, <=1.0.0), scrape-eksi (>=0.0.0, <=0.0.1) +2 more potentially affected by unknown CVE via level-client (>=0.0.1, <=1.0.0)
level-client NPM version =0.0.1, =0.0.4, =0.0.0, =0.2.0, =0.2.6 Source cves: unknown CVE Source advisory: GHSA-WHVP-664W-MW2G...
GHSA-GHCV-22JF-VFXM AVideo has an Incomplete Fix for YPTSocket autoEvalCodeOnHTML Strip: Unauthenticated Cross-User JavaScript Execution via `$msg['json']` Relay Bypass
Summary The server-side mitigation for the YPTSocket autoEvalCodeOnHTML eval sink prior advisory GHSA-gph2-j4c9-vhhr, commit c08694bf6 only strips the payload when it sits under $json'msg', but the relay function msgToResourceId selects the outbound message from $msg'json' before $msg'msg'. An...
MAL-2025-25200 Malicious code in level-json-cache (npm)
The package level-json-cache was found to contain malicious code...
Malicious code in level-json (npm)
The package level-json was found to contain malicious code...
level-json-cache (0.0.0), midibin-api (0.0.0) +6 more potentially affected by unknown CVE via level-json (>=0.0.2, <=2.0.0)
level-json NPM version =0.0.2, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.2.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25199...
memoize-with-leveldb (>=0.0.0, <=0.0.1), radio-paradise-api (>=0.0.0, <=0.0.1) potentially affected by unknown CVE via level-json-cache (>=0.0.0, <=2.0.0)
level-json-cache NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25200...
Malicious code in level-json-cache (npm)
The package level-json-cache was found to contain malicious code...
MAL-2025-25199 Malicious code in level-json (npm)
The package level-json was found to contain malicious code...