MAL-2025-28665 Malicious code in paleobotany-planetology-schema-xo (npm)

The package paleobotany-planetology-schema-xo was found to contain malicious code...

MAL-2025-32959 Malicious code in sequelize-schema-file-generator (npm)

The package sequelize-schema-file-generator was found to contain malicious code...

MAL-2025-39624 Malicious code in xenobiology-darkmatter-schema-cosmicsilence (npm)

The package xenobiology-darkmatter-schema-cosmicsilence was found to contain malicious code...

MAL-2025-40446 Malicious code in yelp-schema-design (npm)

The package yelp-schema-design was found to contain malicious code...

Malicious code in grunt-schema-chalk-nodejs (npm)

The package grunt-schema-chalk-nodejs was found to contain malicious code...

Malicious code in mechatronics-vega-schema-castor (npm)

The package mechatronics-vega-schema-castor was found to contain malicious code...

Malicious code in nf-cl-schema-ui (npm)

The package nf-cl-schema-ui was found to contain malicious code...

Malicious code in paleobotany-planetology-schema-xo (npm)

The package paleobotany-planetology-schema-xo was found to contain malicious code...

Malicious code in sequelize-schema-file-generator (npm)

The package sequelize-schema-file-generator was found to contain malicious code...

Malicious code in wavefunction-schema-draco-global (npm)

The package wavefunction-schema-draco-global was found to contain malicious code...

Malicious code in yelp-schema-design (npm)

The package yelp-schema-design was found to contain malicious code...

Malicious code in biomimicry-cluster-geckodriver-schema (npm)

The package biomimicry-cluster-geckodriver-schema was found to contain malicious code...

Malicious code in brinkbit-schema-group (npm)

The package brinkbit-schema-group was found to contain malicious code...

Malicious code in brinkbit-schema-playerdata (npm)

The package brinkbit-schema-playerdata was found to contain malicious code...

Malicious code in brinkbit-schema-permissions (npm)

The package brinkbit-schema-permissions was found to contain malicious code...

Malicious code in brinkbit-schema-project (npm)

The package brinkbit-schema-project was found to contain malicious code...

Malicious code in brinkbit-schema-user (npm)

The package brinkbit-schema-user was found to contain malicious code...

Malicious code in iwasm-ion-schema (npm)

The package iwasm-ion-schema was found to contain malicious code...

Apache Superset data query improperly discloses database schema information to low-privileged guest user

When a guest user accesses a chart in Apache Superset, the API response from the /chart/data endpoint includes a query field in its payload. This field contains the underlying query, which improperly discloses database schema information, such as table names, to the low-privileged guest user. Thi...

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview apache-superset is a modern, enterprise-ready business intelligence web application. Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere via the query field in the API response from the /chart/data endpoint. An...