Lucene search
+L

6 matches found

OSV
OSV
•added 2026/08/06 1:17 p.m.•10 views

MAL-2026-13408 Malicious code in @activepieces/piece-base44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183bc897806f97f30cf26098efd5714de47475d007a7d5e23fe8fb05dbfe9df7 src/index.js requires childprocess and issues a ping command at line 16, with multiple POST calls at lines 13, 14, and 29 to hardcoded destinations...

5.8AI score
SaveExploits0References1
OSV
OSV
•added 2026/08/05 1:56 p.m.•16 views

MAL-2026-12789 Malicious code in fa-mcp-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62142cbcb6da6a6c078dd91a92cc28d8cfa30a9f4fc901ab2cdbc4cfd6540abb The package includes cli-template/update.cjs, an update helper that combines several install/update-time capabilities: it imports childprocess, https...

6.1AI score
SaveExploits0References1
OSV
OSV
•added 2026/06/23 9:40 p.m.•15 views

MAL-2026-6348 Malicious code in buffer-wrap-67d7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0192c1f2bf35c50a401e2df63f505564880339f5329c0ffcfdb8748cd6d48e3 The package declares a postinstall hook "postinstall": "node run.js" that executes run.js automatically on npm install. run.js imports os, fs, http,...

5.9AI score
SaveExploits0References1
NVD
NVD
•added 2026/06/23 9:16 p.m.•28 views

CVE-2026-46548

NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, the request-filtering-agent SSRF protection was non-functional in the four notification webhook plugins Slack, Discord, Mattermost, Teams because httpAgent / httpsAgent were passed as part of the request body rather th...

4.3CVSS0.00294EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/23 8:41 p.m.•15 views

CVE-2026-46548

NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, the request-filtering-agent SSRF protection was non-functional in the four notification webhook plugins Slack, Discord, Mattermost, Teams because httpAgent / httpsAgent were passed as part of the request body rather th...

4.3CVSS6AI score0.00294EPSS
SaveExploits0References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/06/18 3:27 a.m.•17 views

Malicious code in fmt-helpers-794b (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b05306978ff506805f118049f81c74c5da1503bb34fd14a2a57d4e6faac52c Package declares a postinstall lifecycle hook "postinstall": "node run.js" in package.json that runs run.js automatically on npm install. run.js...

5.8AI score
SaveExploits0References2
Rows per page
Query Builder