MAL-2025-28019 Malicious code in oauth-procyon-sequelize-dendrochronology (npm)

The package oauth-procyon-sequelize-dendrochronology was found to contain malicious code...

MAL-2025-32531 Malicious code in ruby-kafka-oauth-client (npm)

The package ruby-kafka-oauth-client was found to contain malicious code...

MAL-2025-32023 Malicious code in registry-oauth-vortex-hapi (npm)

The package registry-oauth-vortex-hapi was found to contain malicious code...

MAL-2025-26075 Malicious code in mdx-oauth-google-quark (npm)

The package mdx-oauth-google-quark was found to contain malicious code...

MAL-2025-27636 Malicious code in node-oauth-walkthrough (npm)

The package node-oauth-walkthrough was found to contain malicious code...

MAL-2025-28020 Malicious code in oauth-walkthrough (npm)

The package oauth-walkthrough was found to contain malicious code...

Malicious code in xenon-oauth-quantumfoam-geckodriver (npm)

The package xenon-oauth-quantumfoam-geckodriver was found to contain malicious code...

Malicious code in registry-oauth-vortex-hapi (npm)

The package registry-oauth-vortex-hapi was found to contain malicious code...

Malicious code in oauth-web-flow (npm)

The package oauth-web-flow was found to contain malicious code...

Malicious code in oauth-hermes-release-it-nebula (npm)

The package oauth-hermes-release-it-nebula was found to contain malicious code...

Malicious code in mui-sagitta-comet-oauth (npm)

The package mui-sagitta-comet-oauth was found to contain malicious code...

Malicious code in mdx-oauth-google-quark (npm)

The package mdx-oauth-google-quark was found to contain malicious code...

MAL-2025-23609 Malicious code in janus-meteor-toml-oauth (npm)

The package janus-meteor-toml-oauth was found to contain malicious code...

MAL-2025-33573 Malicious code in soap-gravity-jsonp-oauth (npm)

The package soap-gravity-jsonp-oauth was found to contain malicious code...

MAL-2025-26871 Malicious code in mui-sagitta-comet-oauth (npm)

The package mui-sagitta-comet-oauth was found to contain malicious code...

MAL-2025-16409 Malicious code in bytel-oauth (npm)

The package bytel-oauth was found to contain malicious code...

MAL-2025-24350 Malicious code in kaus-oauth-chakra-ui-membrane (npm)

The package kaus-oauth-chakra-ui-membrane was found to contain malicious code...

CVE-2025-54382

Cherry Studio (desktop client) version 1.5.1 is affected by an RCE vulnerability when connecting to streamableHttp MCP servers due to the server’s implicit trust in OAuth redirection URLs and improper URL sanitization. The issue is mitigated by upgrading to version 1.5.2. Exploitation status is n...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: temporal, cert-manager, helm-push, metallb-fips, docker-cli-buildx, sigstore-scaffolding, aws-flb-firehose, vault, redpanda, lazygit, vault-env, rqlite-fips, k6-fips, sigstore-scaffolding-fips, wolfictl, cass-operator-fips-no-pvc-delete, databricks-cli-fips,...

Malicious code in react-native-kraken-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6dd9f629078cdad7b927b9f85f1d8b3a5d381a6009e08c65eafca6272b20cbf2 The OpenSSF Package Analysis project identified 'react-native-kraken-oauth' @ 1.0.1 npm as malicious. It is considered malicious because: - The...