MAL-2025-25555 Malicious code in logrocket-video-mirror (npm)

The package logrocket-video-mirror was found to contain malicious code...

MAL-2025-25549 Malicious code in logrocket-network (npm)

The package logrocket-network was found to contain malicious code...

MAL-2025-25546 Malicious code in logrocket-dom (npm)

The package logrocket-dom was found to contain malicious code...

Malicious code in logrocket-browser (npm)

The package logrocket-browser was found to contain malicious code...

Malicious code in logrocket-fetch (npm)

The package logrocket-fetch was found to contain malicious code...

MAL-2025-25543 Malicious code in logrocket-browser (npm)

The package logrocket-browser was found to contain malicious code...

MAL-2025-25553 Malicious code in logrocket-video (npm)

The package logrocket-video was found to contain malicious code...

Malicious code in logrocket-core (npm)

The package logrocket-core was found to contain malicious code...

MAL-2025-25551 Malicious code in logrocket-protocol (npm)

The package logrocket-protocol was found to contain malicious code...

Malware in lazy-logrocket

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in lazy-logrocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d35d13ebfd82c66db49337a0483da4a0c5460498a2a1a5941e45f1b44f05a1f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4920 Malicious code in lazy-logrocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d35d13ebfd82c66db49337a0483da4a0c5460498a2a1a5941e45f1b44f05a1f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-38488

logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter...

CVE-2022-38488

logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter...

Sql injection

logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter...

CVE-2022-38488

logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter...

PT-2022-24424 · Unknown · Logrocket-Oauth2-Example

Name of the Vulnerable Software and Affected Versions: logrocket-oauth2-example versions prior to 2020-05-27 Description: The issue allows SQL injection via the /auth/register API endpoint, specifically through the username parameter. Recommendations: For versions prior to 2020-05-27, as a...

CVE-2022-38488: Improper Neutralization of Special Elements used in an SQL Command

logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter...

CVE-2022-38488

logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter...

CVE-2022-38488

CVE-2022-38488 affects logrocket-oauth2-example (pre-2020-05-27). The underlying issue is SQL injection in the /auth/register endpoint where the username parameter is inserted into a SQL query without proper sanitization. This leads to potential disclosure, modification, or destruction of data (p...