drift-node-sdk

Il SDK Node.js Tusk Drift consente test API veloci e deterministici catturando e riproducendo le chiamate API fatte verso/da il tuo servizio. Registra automaticamente chiamate API reali, poi riproducile come test utilizzando la CLI Tusk per trovare regressioni. Durante la riproduzione, tutte le...

Cloudinary Node SDK is vulnerable to Arbitrary Argument Injection through parameters that include an ampersand

Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing of parameter values containing an ampersand. An attacker can inject additional, unintended parameters. This could lead to a variety of malicious outcomes, such as bypassing...

Cloudinary Node SDK 安全漏洞

Cloudinary Node SDK is a Cloudinary open source development toolkit for Cloudinary NPM. A security vulnerability exists in Cloudinary Node SDK versions prior to 2.7.0, which stems from improper parsing of parameter values containing with symbols, which could lead to an arbitrary parameter injecti...

Malicious code in node-sdk-input-validation (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in reauthentication-node-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72a2ebcf785b83a7356e194089e96e975e8618fac2aa00fc1c1f3ba097500ae4 Any computer that has this package installed or running should be considered...

MAL-2025-5823 Malicious code in reauthentication-node-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72a2ebcf785b83a7356e194089e96e975e8618fac2aa00fc1c1f3ba097500ae4 Any computer that has this package installed or running should be considered...

Malicious code in lyft-node-sdk-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3fca88a5e88f640bd29c31780f0abe26a1265da8ebbb498b9d8017de5250fef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4435 Malicious code in lyft-node-sdk-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3fca88a5e88f640bd29c31780f0abe26a1265da8ebbb498b9d8017de5250fef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

box-node-sdk (>=1.16.0, <=1.16.1), homebridge-netatmo-schaloms (>=0.2.3, <=0.2.4) +6 more potentially affected by CVE-2018-3752 via merge-options (1.0.0)

merge-options NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on merge-options and may be impacted: - box-node-sdk =1.16.0, =0.2.3, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.13.1, =2.0.0, =2.0.1 Source cves: CVE-2018-3752 Source advisory:...