3 matches found
MAL-2026-13981 Malicious code in eslint-publish-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3befb9fa08cae88e2ebcfb7877a33453bc0b95e0876fb5f76d55b011c8c9869 [email protected] is a hollow package index.js is an empty stub, no lifecycle scripts whose only effect on install is dependency...
Malicious code in eslint-publish-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3befb9fa08cae88e2ebcfb7877a33453bc0b95e0876fb5f76d55b011c8c9869 [email protected] is a hollow package index.js is an empty stub, no lifecycle scripts whose only effect on install is dependency...
Denial Of Service (DoS)
aedes is vulnerable to denial of service. A remote attacker is able to crash the server by sending a malicious payload containing a published header and message length as 0 due to improper error handling in writeNumberCached while trying to create a packet for Publish Release...