MAL-2025-29406 Malicious code in plne2 (npm)

The package plne2 was found to contain malicious code...

MAL-2025-20455 Malicious code in fig-cherry-yejf (npm)

The package fig-cherry-yejf was found to contain malicious code...

MAL-2025-10707 Malicious code in @zalastax/nolb-as_ (npm)

The package @zalastax/nolb-as was found to contain malicious code...

MAL-2025-12576 Malicious code in @zalastax/nolb-ngxt (npm)

The package @zalastax/nolb-ngxt was found to contain malicious code...

MAL-2025-27274 Malicious code in nekohoshi (npm)

The package nekohoshi was found to contain malicious code...

MAL-2025-15287 Malicious code in babel-npm-install (npm)

The package babel-npm-install was found to contain malicious code...

MAL-2025-30909 Malicious code in pxinetd (npm)

The package pxinetd was found to contain malicious code...

MAL-2025-10600 Malicious code in @zalastax/nolb-_x2 (npm)

The package @zalastax/nolb-x2 was found to contain malicious code...

MAL-2025-18205 Malicious code in delta-asteroid-nly184-project (npm)

The package delta-asteroid-nly184-project was found to contain malicious code...

MAL-2025-12262 Malicious code in @zalastax/nolb-lione (npm)

The package @zalastax/nolb-lione was found to contain malicious code...

MAL-2025-18188 Malicious code in deku-zyx (npm)

The package deku-zyx was found to contain malicious code...

MAL-2025-25451 Malicious code in littletea (npm)

The package littletea was found to contain malicious code...

MAL-2025-19029 Malicious code in dynalogin (npm)

The package dynalogin was found to contain malicious code...

MAL-2025-16440 Malicious code in cal_rd (npm)

The package calrd was found to contain malicious code...

MAL-2025-22030 Malicious code in gtunes (npm)

The package gtunes was found to contain malicious code...

MAL-2025-12695 Malicious code in @zalastax/nolb-node-su (npm)

The package @zalastax/nolb-node-su was found to contain malicious code...

MAL-2025-19435 Malicious code in electrobn (npm)

The package electrobn was found to contain malicious code...

MAL-2025-19181 Malicious code in ecilop (npm)

The package ecilop was found to contain malicious code...

GHSA-52F5-9888-HMC6 tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter

Summary [email protected] is vulnerable to an Arbitrary temporary file / directory write via symbolic link dir parameter. Details According to the documentation there are some conditions that must be held: // https://github.com/raszi/node-tmp/blob/v0.2.3/README.md?plain=1L41-L50 Other breaking changes,...

Improper Verification of Cryptographic Signature

Overview @node-saml/node-saml is a SAML 2.0 implementation for Node.js Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via validatePostResponseAsync due to loading of the assertion from the unsigned original response document. An attacker can...