Malicious code in ahmed_salem_o (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ccf3722bcf6828ca9cc9ed0f332cb3778d8a8be73146f96edb1d381a4649f54 The package ahmedsalemo was found to contain malicious code. Source: ghsa-malware dcde03f9a78b367c9044b92cfac2900e588491df6c7894a65c4b2658e26c7e65 An...

Malicious code in ctfvamp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60afd58ec7b3c88e49140c847bac2c30a9e0e6d9f4f700125d59a3302bb9dac2 The package ctfvamp was found to contain malicious code. Source: ghsa-malware 813e410e18d7609781e8b8a67e5750a2e2652e69245b8a6d343d9ea8364d75a6 Any...

Malicious Package

Overview ctfvampir is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in baidu-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421c0014ea5fca29effc2b5cc0a04d984b9c2d557496c3ae31a5724ab6337417 The package baidu-tester was found to contain malicious code. Source: ghsa-malware e3d13abe3b7037aa5d2906857e05ea0f19837a22cf3563951cf23717228d15b2 A...

EUVD-2025-204524

Apache NiFi GetAsanaObject Processor has Remote Code Execution via Unsafe Deserialization...

Apache NiFi GetAsanaObject Processor has Remote Code Execution via Unsafe Deserialization

Apache NiFi 1.20.0 through 2.6.0 include the GetAsanaObject Processor, which requires integration with a configurable Distribute Map Cache Client Service for storing and retrieving state information. The GetAsanaObject Processor used generic Java Object serialization and deserialization without...

CVE-2025-66524 Apache NiFi: Deserialization of Untrusted Data in GetAsanaObject Processor

Apache NiFi 1.20.0 through 2.6.0 include the GetAsanaObject Processor, which requires integration with a configurable Distribute Map Cache Client Service for storing and retrieving state information. The GetAsanaObject Processor used generic Java Object serialization and deserialization without...

CVE-2025-66524

The vulnerability concerns Apache NiFi GetAsanaObject Processor (NiFi 1.20.0–2.6.0) which uses unfiltered Java Object serialization/deserialization with a Distribute Map Cache Client Service for state. The root cause is unsafe deserialization of crafted state data stored in the configured cache s...

Malicious code in chai-as-awaited (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e469d359c2a3a5ca20b47691e64d2330d38d9ad0f173fb440b2ac677d333d6a The package chai-as-awaited was found to contain malicious code. Source: ghsa-malware df0ec4507c7a16056091fbf705d97408c308041bf9b5798d113fdc3042a00b3...

MAL-2025-192622 Malicious code in chai-as-awaited (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e469d359c2a3a5ca20b47691e64d2330d38d9ad0f173fb440b2ac677d333d6a The package chai-as-awaited was found to contain malicious code. Source: ghsa-malware df0ec4507c7a16056091fbf705d97408c308041bf9b5798d113fdc3042a00b3...

MAL-2025-192628 Malicious code in elf-stats-wintry-chimney-348 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ca968ff9d74512694f4175979de59da80fad3394cebfb3f6c09f6900309a2a The package elf-stats-wintry-chimney-348 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192626 Malicious code in elf-stats-cocoa-workshop-459 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362f3da17da5b5a6cbb8124715f6d31867664acc26b4bbbe8537ba02c9dc9677 The package elf-stats-cocoa-workshop-459 was found to contain malicious code. Source: ghsa-malware...

Malicious code in yt-smm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3641ecf42237a55c9fb81c4368aa7b83a42d2110a64a733f45d27005cf38dc26 The package yt-smm was found to contain malicious code. Source: ghsa-malware b4d96978cd4e109ed8b360f551af24fd1621dd659f63a490c9de077b587f607b Any...

Malicious code in vdous (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287389231a3c89843cda42ba76c0357e0f1e933cd479a9e12621a250e7014980 The package vdous was found to contain malicious code. Source: ghsa-malware db289bbb4a097deab7e11457a14affb9e2579bda9632d94fba4110f60b48ae63 Any...

MAL-2025-192639 Malicious code in smm-youtube (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4dd42b2e1f7dbb24d9031965f83d092b8bb933a52d57fd41846f2434b3ec007 The package smm-youtube was found to contain malicious code. Source: ghsa-malware df910dbfab34e87cf538e77e445f1e2d6add23671c18dd9ecead9e25f2aca789 An...

MAL-2025-192657 Malicious code in yt-smm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3641ecf42237a55c9fb81c4368aa7b83a42d2110a64a733f45d27005cf38dc26 The package yt-smm was found to contain malicious code. Source: ghsa-malware b4d96978cd4e109ed8b360f551af24fd1621dd659f63a490c9de077b587f607b Any...

Malicious code in viktorparserctf3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48c2840e0c17dd93d7212fbf45f44cc176dab955745be97cc722dbf28f642cbd The package viktorparserctf3 was found to contain malicious code. Source: ghsa-malware 70fd554f1378b0035e48dd211debb57d92eb88e7548b4e441993571ffd7b89...

Malicious code in viktorparserctf8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e1243238b2a1eade50d8bcfebe117fd9f3090271497fce1f9d1e2798abeaa4 The package viktorparserctf8 was found to contain malicious code. Source: ghsa-malware 610271459dc452bb1384a92a84e0e37bd11f3d688166faa2ee174e81fdaf8a...

Malicious code in viktorparserctf4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00678c1855d2692f49a5643aecec33c4181e61a390c1852ee6b7200f0c2f3ca1 The package viktorparserctf4 was found to contain malicious code. Source: ghsa-malware 0961c05d572349a1c68d499506c8317678a9f123ebbeaf7540186a8cbf6f87...

Malicious code in viktorparserctf6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6530edbf11d75d3f778f5f5f04cd6a3de4e0c38b99f88134dd4da0eee3bdb15b The package viktorparserctf6 was found to contain malicious code. Source: ghsa-malware 6893495a85291a71df39b5938c88e2a8aa526f0f35862bba004f7e184927de...