CVE-2025-11246 Insufficient Granularity of Access Control in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.4 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user with specific permissions to remove all project runners from unrelated projects by manipulating GraphQL runner...

CVE-2023-29237

Missing Authorization vulnerability in Muhammad Rehman Remove Duplicate Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Remove Duplicate Posts: from n/a through 1.3.5...

CVE-2019-25296

The WP Cost Estimation plugin for WordPress is vulnerable to arbitrary file uploads and deletion due to missing file type validation in the lfbuploadform and lfbremoveFile AJAX actions in versions up to, and including, 9.642. This makes it possible for unauthenticated attackers to upload arbitrar...

Malicious code in n8n-nodes-ggdv-hdfvcnnje-uyrokvbkl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153a9330a9d7d9400ff4dd8525ff7d5069ca8ead835562e7ffe0bc16a4c9b22b The package n8n-nodes-ggdv-hdfvcnnje-uyrokvbkl was found to contain malicious code. Source: ghsa-malware...

MAL-2026-178 Malicious code in n8n-nodes-hfgjf-irtuinvcm-lasdqewriit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dabf38b16acea59219df3a3f57a396f3ebe958985096579cd43c419609b764 The package n8n-nodes-hfgjf-irtuinvcm-lasdqewriit was found to contain malicious code. Source: ghsa-malware...

Malicious code in n8n-nodes-vbmkajdsa-uehfitvv-ueqjhhhksdlkkmz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5b9fc4d665c764917757933148572fd5cfca44be431dd6f84281b068b1ccfc The package n8n-nodes-vbmkajdsa-uehfitvv-ueqjhhhksdlkkmz was found to contain malicious code. Source: ghsa-malware...

Malicious code in n8n-nodes-hfgjf-irtuinvcm-lasdqewriit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dabf38b16acea59219df3a3f57a396f3ebe958985096579cd43c419609b764 The package n8n-nodes-hfgjf-irtuinvcm-lasdqewriit was found to contain malicious code. Source: ghsa-malware...

MAL-2026-177 Malicious code in n8n-nodes-ggdv-hdfvcnnje-uyrokvbkl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153a9330a9d7d9400ff4dd8525ff7d5069ca8ead835562e7ffe0bc16a4c9b22b The package n8n-nodes-ggdv-hdfvcnnje-uyrokvbkl was found to contain malicious code. Source: ghsa-malware...

Malicious code in yunxohang5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b8411b8cd6fea01585a7c07048bb6880d2d0fe380b145a797bce43b1e96388 The package yunxohang5 was found to contain malicious code. Source: ghsa-malware bef3f7dd8a9554ed61db94960f012c42f81192bb019b989608cd9db4e50dfb78 Any...

MAL-2026-187 Malicious code in yunxohang7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a769d99a6a661851b61de53efc010814ffb939cd296c6f923849dc61f89b3f The package yunxohang7 was found to contain malicious code. Source: ghsa-malware 1b795328419a9d8a5a0cf95479488558080aafb9593636fccd0c5bbf500f5f55 Any...

MAL-2026-183 Malicious code in yunxohang11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bcda0e592de29bfcadb36b9fc15f8e9286e6a900d24e8bfc6c377e6ed2c92c1 The package yunxohang11 was found to contain malicious code. Source: ghsa-malware fb0d6761dd8d1cd805af3477c095b5c7acdd92dd5eb9b0aa1c877e65f8ded822 An...

Malicious code in shreddit.styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cce1be43bf6e26a99a58a3f011f71a44d06f3227d24bf2274c9f3b41c0fc3de The package shreddit.styles was found to contain malicious code. Source: ghsa-malware 2c65bd95325c1ee64e6f0b45b33b62af1973c49ed5c4eed64c725d08a51201b...

Malicious code in yunxohang11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bcda0e592de29bfcadb36b9fc15f8e9286e6a900d24e8bfc6c377e6ed2c92c1 The package yunxohang11 was found to contain malicious code. Source: ghsa-malware fb0d6761dd8d1cd805af3477c095b5c7acdd92dd5eb9b0aa1c877e65f8ded822 An...

Malicious code in chai-tests-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b1116b21de9a6d4e20096c4af06f91c10ce3eaadd3d722923988084ddd4899a The package chai-tests-async was found to contain malicious code. Source: ghsa-malware dcf794e17cf7abc4b2cb2473da8d9425c720cdcf72e279adab300048154cd6...

Malicious code in dotenv-intended (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 321eaa257985bd47bbf31b2f7ccdaef2df5b424b7b257400a48140ef6029e670 The package dotenv-intended was found to contain malicious code. Source: ghsa-malware df2195d5589f3e44d82053db7cd9ae186dfd168b35c9db8f97baa29f0c63612...

MAL-2026-175 Malicious code in jwtdapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5222fd8fda1f00da9cfbd3e5bd457aaa90b6ea456aeb1ae2b9a5448dedc46b62 The package jwtdapp was found to contain malicious code. Source: ghsa-malware 916f8af27ab4818456f9abe642d6c4bcd8d3126e510e5a46e516a0fd45785d7d Any...

Malicious code in mixpanel-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b11bdefc18a5b590716cefe2036f1f759ccb42fd3c22c420ac524a479ff9f01 The package mixpanel-lib was found to contain malicious code. Source: ghsa-malware 03fe07795e21df3debb6abf06b5b47f19ddd7996e5be6b06d8dd07fa37e7cd2f A...

Malicious Package

Overview smintio-portals-component-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2026-171 Malicious code in amdocs-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a6af3ffb67d97ff5a166cfa06c9dc841eab5d736ffbbdae5f3a693d7845be2 The package amdocs-core was found to contain malicious code. Source: ghsa-malware 19cbd66c5d36a7bcc61d3202596dea181a2782d867db3ea2cbb0e322f01b99db An...

MAL-2026-181 Malicious code in smintio-portals-component-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ac8dad03743200fb36bb249f7d2292a267daaffb767a56e0c0e6634dc71afe The package smintio-portals-component-sdk was found to contain malicious code. Source: ghsa-malware...