MAL-2025-27645 Malicious code in node-red-contrib-objstore (npm)

The package node-red-contrib-objstore was found to contain malicious code...

MAL-2025-12664 Malicious code in @zalastax/nolb-node-red-contrib-2 (npm)

The package @zalastax/nolb-node-red-contrib-2 was found to contain malicious code...

MAL-2025-12671 Malicious code in @zalastax/nolb-node-red-contrib-e (npm)

The package @zalastax/nolb-node-red-contrib-e was found to contain malicious code...

MAL-2025-12674 Malicious code in @zalastax/nolb-node-red-contrib-h (npm)

The package @zalastax/nolb-node-red-contrib-h was found to contain malicious code...

MAL-2025-27647 Malicious code in node-red-contrib-storfly-iot-vtview (npm)

The package node-red-contrib-storfly-iot-vtview was found to contain malicious code...

MAL-2025-12670 Malicious code in @zalastax/nolb-node-red-contrib-d (npm)

The package @zalastax/nolb-node-red-contrib-d was found to contain malicious code...

MAL-2025-12653 Malicious code in @zalastax/nolb-node-red-ci (npm)

The package @zalastax/nolb-node-red-ci was found to contain malicious code...

MAL-2025-12666 Malicious code in @zalastax/nolb-node-red-contrib-5 (npm)

The package @zalastax/nolb-node-red-contrib-5 was found to contain malicious code...

MAL-2025-27648 Malicious code in node-red-contrib-storfly-vtview (npm)

The package node-red-contrib-storfly-vtview was found to contain malicious code...

MAL-2025-12672 Malicious code in @zalastax/nolb-node-red-contrib-f (npm)

The package @zalastax/nolb-node-red-contrib-f was found to contain malicious code...

MAL-2025-12654 Malicious code in @zalastax/nolb-node-red-cl (npm)

The package @zalastax/nolb-node-red-cl was found to contain malicious code...

MAL-2025-27650 Malicious code in node-red-contrib-xmlc14n (npm)

The package node-red-contrib-xmlc14n was found to contain malicious code...

MAL-2025-12667 Malicious code in @zalastax/nolb-node-red-contrib-a (npm)

The package @zalastax/nolb-node-red-contrib-a was found to contain malicious code...

MAL-2025-12676 Malicious code in @zalastax/nolb-node-red-contrib-j (npm)

The package @zalastax/nolb-node-red-contrib-j was found to contain malicious code...

MAL-2025-12665 Malicious code in @zalastax/nolb-node-red-contrib-4 (npm)

The package @zalastax/nolb-node-red-contrib-4 was found to contain malicious code...

MAL-2025-12663 Malicious code in @zalastax/nolb-node-red-contrib-1 (npm)

The package @zalastax/nolb-node-red-contrib-1 was found to contain malicious code...

MAL-2025-12673 Malicious code in @zalastax/nolb-node-red-contrib-g (npm)

The package @zalastax/nolb-node-red-contrib-g was found to contain malicious code...

The vulnerability of the Node-RED visual programming tool’s server on the Pilz IndustrialPI operating system allows a perpetrator to execute arbitrary commands.

The vulnerability of the Node-RED visual programming tool on the Pilz IndustrialPI industrial computer server is related to the absence of default authentication settings. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-41656 Pilz: Missing Authentication in Node-RED integration

An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the authentication for the NodeRED server is not configured by default...

CVE-2025-41656 Pilz: Missing Authentication in Node-RED integration

An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the authentication for the NodeRED server is not configured by default...