MAL-2025-32825 Malicious code in screwdriver-plugin-builds (npm)

The package screwdriver-plugin-builds was found to contain malicious code...

Malicious code in screwdriver-plugin-builds (npm)

The package screwdriver-plugin-builds was found to contain malicious code...

Information Disclosure in Plugin SDK in Grafana

The grafana plugin SDK bundles build metadata into the binaries it compiles; this metadata includes the repository URI for the plugin being built, as retrieved by running git remote get-url origin . If credentials are included in the repository URI for instance, to allow for fetching of private...