Malicious code in linkedin-service (npm)

--- Credit: OpenSSF source...

PT-2026-26479

Summary The uploadVideoToLinkedIn method in the SocialMediaPublisher plugin constructs a shell command by directly interpolating an upload URL received from LinkedIn's API response, without sanitization via escapeshellarg. If an attacker can influence the LinkedIn API response via MITM, compromis...

MAL-2025-1879 Malicious code in linkedin-service (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in linkedin-service (npm)

--- -= Per source details. Do not edit below this line.=-...