MAL-2025-17865 Malicious code in cybernetics-terser-webpack-plugin-phenomic-dotenv-parse-variables (npm)

The package cybernetics-terser-webpack-plugin-phenomic-dotenv-parse-variables was found to contain malicious code...

MAL-2025-18662 Malicious code in dotenv-parse-variables-neutrino-spinner-higgs (npm)

The package dotenv-parse-variables-neutrino-spinner-higgs was found to contain malicious code...

MAL-2025-18663 Malicious code in dotenv-parse-variables-norma-adonis-duplex (npm)

The package dotenv-parse-variables-norma-adonis-duplex was found to contain malicious code...

MAL-2025-18664 Malicious code in dotenv-parse-variables-scorpius-borealis-style-loader (npm)

The package dotenv-parse-variables-scorpius-borealis-style-loader was found to contain malicious code...

MAL-2025-20702 Malicious code in float-module-export-encode-parse (npm)

The package float-module-export-encode-parse was found to contain malicious code...

Malicious code in pino-pretty-deneb-dotenv-parse-variables-hugo (npm)

The package pino-pretty-deneb-dotenv-parse-variables-hugo was found to contain malicious code...

Malicious code in parse-tree-array-function-decode (npm)

The package parse-tree-array-function-decode was found to contain malicious code...

Malicious code in blazar-non-blocking-dotenv-parse-variables-test (npm)

The package blazar-non-blocking-dotenv-parse-variables-test was found to contain malicious code...

MAL-2025-29393 Malicious code in playwright-mocha-chai-dotenv-parse-variables (npm)

The package playwright-mocha-chai-dotenv-parse-variables was found to contain malicious code...

MAL-2025-28878 Malicious code in parse-safari-reading-list (npm)

The package parse-safari-reading-list was found to contain malicious code...

MAL-2025-28882 Malicious code in parse-unix-minify-balance-route (npm)

The package parse-unix-minify-balance-route was found to contain malicious code...

MAL-2025-39001 Malicious code in webdriverio-nucleosynthesis-fork-dotenv-parse-variables (npm)

The package webdriverio-nucleosynthesis-fork-dotenv-parse-variables was found to contain malicious code...

MAL-2025-18665 Malicious code in dotenv-parse-variables-xanthus-nestjs-playwright (npm)

The package dotenv-parse-variables-xanthus-nestjs-playwright was found to contain malicious code...

MAL-2025-28879 Malicious code in parse-server-hotfix (npm)

The package parse-server-hotfix was found to contain malicious code...

MAL-2025-38683 Malicious code in vuetify-commitizen-prompts-dotenv-parse-variables (npm)

The package vuetify-commitizen-prompts-dotenv-parse-variables was found to contain malicious code...

MAL-2025-28877 Malicious code in parse-react-next (npm)

The package parse-react-next was found to contain malicious code...

MAL-2025-38051 Malicious code in validate-function-parse-execute-interface (npm)

The package validate-function-parse-execute-interface was found to contain malicious code...

MAL-2025-30975 Malicious code in pyxis-antimatter-dotenv-parse-variables-xenos (npm)

The package pyxis-antimatter-dotenv-parse-variables-xenos was found to contain malicious code...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2025-55197 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2025-55197 Source advisory: OSV:GHSA-7HFW-26VP-JP8M...

OliveTin OS Command Injection vulnerability

OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go...