Malicious code in rt-qa-sampler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d57d7fdf7de875c7da43a03defcfe1df8c66f3a72a0802585f903e5e4e4a19 The package rt-qa-sampler was found to contain malicious code. Source: ghsa-malware 7db994932160920a0a11f0ca0419898a6c0552e1f38b68ccf9bb6b59d72f98fb...

Malicious code in @dev-blinq/ai-qa-logic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bcfefccc1ff9a7579321c6e45d16fc6aa94b9eaa45952fe47d415c2ffcde9a4 The package @dev-blinq/ai-qa-logic was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199504

Malicious code in @dev-blinq/ai-qa-logic npm...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

PT-2025-47158

Name of the Vulnerable Software and Affected Versions QaTraq version 6.9.2 Description Authenticated users can upload arbitrary files through the "Add Attachment" feature within the "Test Script" module. The application does not restrict file types, allowing the upload of executable PHP files...

Malicious code in qa-egs-rollback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f069cbe096962a4415247fec584da742da87006805e2e0a12d2e0a080936479d The package qa-egs-rollback was found to contain malicious code...

EUVD-2025-37058

Malicious code in qa-egs-rollback npm...

MAL-2025-49235 Malicious code in qa-egs-rollback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f069cbe096962a4415247fec584da742da87006805e2e0a12d2e0a080936479d The package qa-egs-rollback was found to contain malicious code...

EUVD-2017-9718

Malware in sbrugna...

cli-form (>=0.1.0, <=0.1.4), cli-qa (>=2.0.0, <=2.3.0) +1 more potentially affected by unknown CVE via comma-list (>=0.0.0, <=0.0.1)

comma-list NPM version =0.0.0, =0.1.0, =2.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17400...

cli-form (>=0.0.0, <=0.1.4), cli-qa (>=0.0.0, <=2.3.0) +2 more potentially affected by unknown CVE via on-key-press (0.0.0)

on-key-press NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on on-key-press and may be impacted: - cli-form =0.0.0, =0.0.0, =0.0.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28228...

Malicious code in @frozen-team-qa/user-service (npm)

The package @frozen-team-qa/user-service was found to contain malicious code...

Malicious code in @frozen-team-qa/positions-service (npm)

The package @frozen-team-qa/positions-service was found to contain malicious code...

Malicious code in @frozen-team-qa/playwright-helpers (npm)

The package @frozen-team-qa/playwright-helpers was found to contain malicious code...

MAL-2025-7953 Malicious code in @frozen-team-qa/notes-service (npm)

The package @frozen-team-qa/notes-service was found to contain malicious code...

MAL-2025-7957 Malicious code in @frozen-team-qa/playwright-slack-reporter (npm)

The package @frozen-team-qa/playwright-slack-reporter was found to contain malicious code...

Malicious code in @frozen-team-qa/utils (npm)

The package @frozen-team-qa/utils was found to contain malicious code...

Malicious code in @frozen-team-qa/playwright-components (npm)

The package @frozen-team-qa/playwright-components was found to contain malicious code...

Malicious code in @frozen-team-qa/ga-store-base (npm)

The package @frozen-team-qa/ga-store-base was found to contain malicious code...

change-object (0.0.0), cli-qa (2.0.0) +7 more potentially affected by unknown CVE via filter-stack (0.0.0)

filter-stack NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on filter-stack and may be impacted: - change-object 0.0.0 - cli-qa 2.0.0 - comma-list 0.0.0 - fd-select 1.0.0 - frp-tick 1.0.0 - innkeeper 1.0.4 - limited-parallel-loop 0.0.0 ...