CodeceptJS's incomprehensive sanitation can lead to Command Injection

CodeceptJS versions 3.5.0 through 3.7.5-beta.18 contain a command injection vulnerability in the emptyFolder function lib/utils.js. The execSync command directly concatenates the user-controlled directoryPath parameter without sanitization or escaping, allowing attackers to execute arbitrary...

CVE-2025-57285: Improper Neutralization of Special Elements used in a Command

codeceptjs 3.7.3 contains a command injection vulnerability in the emptyFolder function lib/utils.js. The execSync command directly concatenates the user-controlled directoryPath parameter without sanitization or escaping, allowing attackers to execute arbitrary commands...

CVE-2025-57285

codeceptjs 3.7.3 contains a command injection vulnerability in the emptyFolder function lib/utils.js. The execSync command directly concatenates the user-controlled directoryPath parameter without sanitization or escaping, allowing attackers to execute arbitrary commands...

Malicious code in @zalastax/nolb-lion-lib-1 (npm)

The package @zalastax/nolb-lion-lib-1 was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-lib-2 (npm)

The package @zalastax/nolb-lion-lib-2 was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-lib-5 (npm)

The package @zalastax/nolb-lion-lib-5 was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-lib-6 (npm)

The package @zalastax/nolb-lion-lib-6 was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-lib-8 (npm)

The package @zalastax/nolb-lion-lib-8 was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-lib-a (npm)

The package @zalastax/nolb-lion-lib-a was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-lib-b (npm)

The package @zalastax/nolb-lion-lib-b was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-lib-e (npm)

The package @zalastax/nolb-lion-lib-e was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-lib-9 (npm)

The package @zalastax/nolb-lion-lib-9 was found to contain malicious code...

MAL-2025-43333 Malicious code in @zalastax/nolb-lion-lib-6 (npm)

The package @zalastax/nolb-lion-lib-6 was found to contain malicious code...

MAL-2025-43337 Malicious code in @zalastax/nolb-lion-lib-a (npm)

The package @zalastax/nolb-lion-lib-a was found to contain malicious code...

MAL-2025-43334 Malicious code in @zalastax/nolb-lion-lib-7 (npm)

The package @zalastax/nolb-lion-lib-7 was found to contain malicious code...

MAL-2025-43326 Malicious code in @zalastax/nolb-lion-lib-- (npm)

The package @zalastax/nolb-lion-lib-- was found to contain malicious code...

MAL-2025-43338 Malicious code in @zalastax/nolb-lion-lib-b (npm)

The package @zalastax/nolb-lion-lib-b was found to contain malicious code...

MAL-2025-43328 Malicious code in @zalastax/nolb-lion-lib-1 (npm)

The package @zalastax/nolb-lion-lib-1 was found to contain malicious code...

MAL-2025-43336 Malicious code in @zalastax/nolb-lion-lib-9 (npm)

The package @zalastax/nolb-lion-lib-9 was found to contain malicious code...

MAL-2025-43331 Malicious code in @zalastax/nolb-lion-lib-4 (npm)

The package @zalastax/nolb-lion-lib-4 was found to contain malicious code...