2 matches found
Malicious code in middleware-jwt-nodejs-less (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876ed592f5ff69967e646f362302ccbd5320b93b6af7605fae57da5c8234402f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
UBUNTU-CVE-2025-7339
on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead. Users should upgrade to version 1.1.0 to receive a patch. Uses are...