Malicious Package

Overview mms-service is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

CVE-2026-65421: Out-of-bounds Read

The MMS BER decoder contains a flaw in decoding fixed-width BER fields boolean/integer: an attacker-supplied length value is not validated, causing a read past the end of a heap buffer. This leads to termination of the MMS service process and a denial-of-service condition...

EUVD-2025-37064

Malicious code in mms-service npm...

Malicious code in mms-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5912faf3f600f103f64fe2d342cbd05b7146c3b78d9ee54473b28195a5185e49 The package mms-service was found to contain malicious code...

MAL-2025-49229 Malicious code in mms-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5912faf3f600f103f64fe2d342cbd05b7146c3b78d9ee54473b28195a5185e49 The package mms-service was found to contain malicious code...