postman-cli (>=1.16.0-canary.1 <=1.24.2) potentially affected by unknown CVE via @postman/pm-bin-macos-x64 (>=1.16.0-canary.1 <=1.24.2)

@postman/pm-bin-macos-x64 NPM version =1.16.0-canary.1, =1.16.0-canary.1, =1.24.2 Source cves: unknown CVE Source advisory: SNYK:JS-POSTMANPMBINMACOSX64-14103294...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-198801

Malicious code in @postman/node-keytar npm...

Malicious code in @postman/node-keytar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4c8023740ffdaef4872c662f4f7be6f3258a479dfb93494adda9c170fa4818 The package @postman/node-keytar was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198687

Malicious code in @postman/aether-icons npm...

MAL-2025-190676 Malicious code in @postman/aether-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4244dc3aeb4aeef61e6a25bf53dd406e67c8b3d33f710a91934f64a631ae69 The package @postman/aether-icons was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198633

Malicious code in @postman/csv-parse npm...

Malicious code in @postman/csv-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6072df393f967e34b9e50f3c9843f4716a7e65e30aff5648c7f003cb37c38e01 The package @postman/csv-parse was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190646 Malicious code in @postman/csv-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6072df393f967e34b9e50f3c9843f4716a7e65e30aff5648c7f003cb37c38e01 The package @postman/csv-parse was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198643

Malicious code in @postman/tunnel-agent npm...

Malicious code in @postman/tunnel-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6961dafcc910bb7a6b1db8cb597068eeb85f973dcd669392354a7b614928dbf5 The package @postman/tunnel-agent was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190647 Malicious code in @postman/tunnel-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6961dafcc910bb7a6b1db8cb597068eeb85f973dcd669392354a7b614928dbf5 The package @postman/tunnel-agent was found to contain malicious code. Source: ghsa-malware...

Key API Security Takeaways from the Postman 2025 State of API Report

API security has never been more important because modern APIs are operational necessities. Unfortunately, many organizations are failing to adapt their security models to a rapidly changing API threat landscape. Like it or not, we live in an AI-first world, and API security must reflect that...

EUVD-2017-9716

Malware in sbrugna...

EUVD-2025-1841

Malicious code in bioql PyPI...

Malicious code in postman-converters (npm)

The package postman-converters was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f892ed43c85774f667cf9303e6d7ca7d30763a23dc3c6bb4e2261954dfee9070 Any computer that has this package installed or running should be considered fully...

Malicious code in postman-json (npm)

The package postman-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63e81e735aa1583841441847e7de0a269d581efabcfdcdac7cb7d6afd64df258 Any computer that has this package installed or running should be considered fully...

Malicious Package

Overview postman-converters is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview postman-json is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-47566 Malicious code in postman-json (npm)

The package postman-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63e81e735aa1583841441847e7de0a269d581efabcfdcdac7cb7d6afd64df258 Any computer that has this package installed or running should be considered fully...