Malicious code in react-qr-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0000767e8d42376cf8a198fa59803da5acb13d0317314fcb57902d5d373f035 The package react-qr-image was found to contain malicious code. Source: ghsa-malware 72459a160e75d16a5a10d9805d6c558aabb61428411359b97050ebf70be1270f...

EUVD-2025-199036

Malicious code in react-qr-image npm...

MAL-2025-191007 Malicious code in react-qr-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0000767e8d42376cf8a198fa59803da5acb13d0317314fcb57902d5d373f035 The package react-qr-image was found to contain malicious code. Source: ghsa-malware 72459a160e75d16a5a10d9805d6c558aabb61428411359b97050ebf70be1270f...

Malicious code in qr-image-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d5c6e98a52bcdf829064fd8ff9c8b7507f033e8c912af7a333211aa917e1d16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in qr-image-generator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-8798 Malicious code in qr-image-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d5c6e98a52bcdf829064fd8ff9c8b7507f033e8c912af7a333211aa917e1d16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-39165

QR/demoapp/qrimage.php in Asial JpGraph Professional through 4.2.6-pro allows remote attackers to execute arbitrary code via a PHP payload in the data parameter in conjunction with a .php file name in the filename parameter. This occurs because an unnecessary QR/demoapp folder.is shipped with the...

CVE-2024-39165

Summary: CVE-2024-39165 affects Asial JpGraph Professional up to version 4.2.6-pro. The vulnerability arises from the presence of an unnecessary QR/demoapp folder, enabling a remote attacker to execute arbitrary PHP code via a payload placed in the data parameter and a .php filename in the filena...