MAL-2025-12482 Malicious code in @zalastax/nolb-ng- (npm)

The package @zalastax/nolb-ng- was found to contain malicious code...

Malicious code in @zalastax/nolb-ng (npm)

The package @zalastax/nolb-ng was found to contain malicious code...

Malicious code in @zalastax/nolb-ng-r (npm)

The package @zalastax/nolb-ng-r was found to contain malicious code...

Malicious code in ng-demo-lib-ts (npm)

The package ng-demo-lib-ts was found to contain malicious code...

Malicious code in @zalastax/nolb-ng-q (npm)

The package @zalastax/nolb-ng-q was found to contain malicious code...

MAL-2025-33435 Malicious code in slush-ng-blank (npm)

The package slush-ng-blank was found to contain malicious code...

MAL-2025-12485 Malicious code in @zalastax/nolb-ng-s (npm)

The package @zalastax/nolb-ng-s was found to contain malicious code...

MAL-2025-12492 Malicious code in @zalastax/nolb-ng-z (npm)

The package @zalastax/nolb-ng-z was found to contain malicious code...

MAL-2025-27455 Malicious code in ng-antui (npm)

The package ng-antui was found to contain malicious code...

MAL-2025-12481 Malicious code in @zalastax/nolb-ng (npm)

The package @zalastax/nolb-ng was found to contain malicious code...

MAL-2025-27458 Malicious code in ng-encrypt (npm)

The package ng-encrypt was found to contain malicious code...

MAL-2025-27456 Malicious code in ng-bundle (npm)

The package ng-bundle was found to contain malicious code...

Log Injection

pyload-ng is vulnerable to Log Injection. The vulnerability is due to improper input sanitization due to failure to filter user-supplied data in the /json/addpackage API, allowing attackers with package addition permissions to inject arbitrary messages into application logs...

SQL Injection

Overview pyload-ng is a The free and open-source Download Manager written in pure Python Affected versions of this package are vulnerable to SQL Injection via the addlinks parameter in the /json/addpackage API endpoint. An attacker can modify or delete data in the database by injecting malicious...

MAL-2025-6814 Malicious code in horizon-ui-ng (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 05025cfe461de95f60e8359c367b851181a07564256a7ce672e7c313007d0f87 The OpenSSF Package Analysis project identified 'horizon-ui-ng' @...

Malicious code in horizon-ui-ng (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 05025cfe461de95f60e8359c367b851181a07564256a7ce672e7c313007d0f87 The OpenSSF Package Analysis project identified 'horizon-ui-ng' @...

CVE-2025-54870

VTun-ng is a Virtual Tunnel over TCP/IP network. In versions 3.0.17 and below, failure to initialize encryption modules might cause reversion to plaintext due to insufficient error handling. The bug was first introduced in VTun-ng version 3.0.12. This is fixed in version 3.0.18. To workaround thi...

PaperCut NG 21.2 < 21.2.12 / 22.x < 22.1.1 Path Traversal

The version of PaperCut NG installed on the remote Windows host is affected by a vulnerability. A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. Under specific conditions, this could potentially allow an authenticated attacker to achieve read-only...

CVE-2025-54870

VTun-ng is a Virtual Tunnel over TCP/IP network. In versions 3.0.17 and below, failure to initialize encryption modules might cause reversion to plaintext due to insufficient error handling. The bug was first introduced in VTun-ng version 3.0.12. This is fixed in version 3.0.18. To workaround thi...

CVE-2025-54870 VTun-ng's failure to initialize encryption modules may cause reversion to plaintext

VTun-ng is a Virtual Tunnel over TCP/IP network. In versions 3.0.17 and below, failure to initialize encryption modules might cause reversion to plaintext due to insufficient error handling. The bug was first introduced in VTun-ng version 3.0.12. This is fixed in version 3.0.18. To workaround thi...