MAL-2025-192662 Malicious code in adeliana-xnetgpt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f83c4bf47eb41e57e89cb19f6d28796be0fbc39ff598db3ae6f04d87500fb7a The package adeliana-xnetgpt was found to contain malicious code. Source: ghsa-malware 780aa557a66927e031b481d2f7add1e807605370d094563885c82f533a7ab7...

Malicious code in xnetgpt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cec426261ce30ea326ac55c56aaaf04c8efc5dad86f9eecaf8a8397df70dec7 The package xnetgpt was found to contain malicious code. Source: ghsa-malware 168c69e604f23926993c52e06b6a5f4b5355d3dd935261e5aba8c5d761bb17e1 Any...

Malicious code in wifi-killer-xnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc233a0f06c7d7ecc69b5b2166295c9e8b63c8c05198355f8f80295907125e17 The package wifi-killer-xnet was found to contain malicious code. Source: ghsa-malware 98f1d50e89f69d69cfae05f464ddc4db1ea8e83fb48168cad1f75c87d4705a...

MAL-2025-192668 Malicious code in ddos-gacor-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32622783fe9401d4c567f638a03e43b4559383e7f853ff0457f7f301420f95e9 The package ddos-gacor-v2 was found to contain malicious code. Source: ghsa-malware 3192709ec1aa7bcf745ab018eb8d6a537ace33453acda64299ef30193f8d64a9...

Malicious code in zebracros-bahlil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1584c60176e7489fa7d40f80dd373fc228d0cb39052fb1e6b5e638f955d229 The package zebracros-bahlil was found to contain malicious code. Source: ghsa-malware c31864656b362790c68a366d8374f2f6ab6b6d8ddf9c04f49cca4eceee2a9e...

Malicious code in sonia3-npm-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 339534853ebcb623a903a0515ab9ae854edaac8fdfec58d3edb454c501238d19 The package sonia3-npm-js was found to contain malicious code. Source: ghsa-malware 3b951ad6a6c46f78a032c0c93db496b6b13cfadccf178f195cd6c3f28531ed1e...

MAL-2025-192676 Malicious code in zebracros-bahlil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1584c60176e7489fa7d40f80dd373fc228d0cb39052fb1e6b5e638f955d229 The package zebracros-bahlil was found to contain malicious code. Source: ghsa-malware c31864656b362790c68a366d8374f2f6ab6b6d8ddf9c04f49cca4eceee2a9e...

Malicious code in asdfgh33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59190dcd898218c2925fdb51e3fe1090cb928c4bd0de218b403c0f25469ff083 The package asdfgh33 was found to contain malicious code. Source: ghsa-malware 15c01c114a3291d28b718c3328ddd213e72bb0ee0976ef40070061e41f1c3e3f Any...

MAL-2025-192663 Malicious code in ahmed_salem_o (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ccf3722bcf6828ca9cc9ed0f332cb3778d8a8be73146f96edb1d381a4649f54 The package ahmedsalemo was found to contain malicious code. Source: ghsa-malware dcde03f9a78b367c9044b92cfac2900e588491df6c7894a65c4b2658e26c7e65 An...

Malicious code in ahmed_salem_o (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ccf3722bcf6828ca9cc9ed0f332cb3778d8a8be73146f96edb1d381a4649f54 The package ahmedsalemo was found to contain malicious code. Source: ghsa-malware dcde03f9a78b367c9044b92cfac2900e588491df6c7894a65c4b2658e26c7e65 An...

Malicious code in ctfvamp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60afd58ec7b3c88e49140c847bac2c30a9e0e6d9f4f700125d59a3302bb9dac2 The package ctfvamp was found to contain malicious code. Source: ghsa-malware 813e410e18d7609781e8b8a67e5750a2e2652e69245b8a6d343d9ea8364d75a6 Any...

Malicious Package

Overview ctfvampir is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in baidu-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421c0014ea5fca29effc2b5cc0a04d984b9c2d557496c3ae31a5724ab6337417 The package baidu-tester was found to contain malicious code. Source: ghsa-malware e3d13abe3b7037aa5d2906857e05ea0f19837a22cf3563951cf23717228d15b2 A...

EUVD-2025-204524

Apache NiFi GetAsanaObject Processor has Remote Code Execution via Unsafe Deserialization...

Apache NiFi GetAsanaObject Processor has Remote Code Execution via Unsafe Deserialization

Apache NiFi 1.20.0 through 2.6.0 include the GetAsanaObject Processor, which requires integration with a configurable Distribute Map Cache Client Service for storing and retrieving state information. The GetAsanaObject Processor used generic Java Object serialization and deserialization without...

CVE-2025-66524 Apache NiFi: Deserialization of Untrusted Data in GetAsanaObject Processor

Apache NiFi 1.20.0 through 2.6.0 include the GetAsanaObject Processor, which requires integration with a configurable Distribute Map Cache Client Service for storing and retrieving state information. The GetAsanaObject Processor used generic Java Object serialization and deserialization without...

CVE-2025-66524

The vulnerability concerns Apache NiFi GetAsanaObject Processor (NiFi 1.20.0–2.6.0) which uses unfiltered Java Object serialization/deserialization with a Distribute Map Cache Client Service for state. The root cause is unsafe deserialization of crafted state data stored in the configured cache s...

MAL-2025-192622 Malicious code in chai-as-awaited (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e469d359c2a3a5ca20b47691e64d2330d38d9ad0f173fb440b2ac677d333d6a The package chai-as-awaited was found to contain malicious code. Source: ghsa-malware df0ec4507c7a16056091fbf705d97408c308041bf9b5798d113fdc3042a00b3...

Malicious code in chai-as-awaited (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e469d359c2a3a5ca20b47691e64d2330d38d9ad0f173fb440b2ac677d333d6a The package chai-as-awaited was found to contain malicious code. Source: ghsa-malware df0ec4507c7a16056091fbf705d97408c308041bf9b5798d113fdc3042a00b3...

MAL-2025-192628 Malicious code in elf-stats-wintry-chimney-348 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ca968ff9d74512694f4175979de59da80fad3394cebfb3f6c09f6900309a2a The package elf-stats-wintry-chimney-348 was found to contain malicious code. Source: ghsa-malware...