MAL-2025-192417 Malicious code in rum-events-format (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6a17ba09614cd69d096859385577957b2737a3dce290dda9712c51fd7179c5 The package rum-events-format was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192405 Malicious code in confluent-kafka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f8f3691acc10147a767bd08facab31e59a8acfb8d38c89df1400e263cc6f8f The package confluent-kafka was found to contain malicious code. Source: ghsa-malware 135e8cf2cd5582b8ed8562c5f5ccfd1cf7265319ad340463b750b75e341858e...

Malicious code in fastavro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e01c7f0d2603f1d6cf541b7aa69c4bf9253ad1cd6b970a3337db957668a420 The package fastavro was found to contain malicious code. Source: ghsa-malware dfa83913e0a60ce0006e336f2f9f837aac0fa16d414d3c4c149562e19aed7474 Any...

Malicious code in datadog-checks-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26bc16bdf501ec221458349c8a28879a12b353a46c1126cc93d9f0ce3af9d793 The package datadog-checks-downloader was found to contain malicious code. Source: ghsa-malware...

Malicious code in sfdc-abstract-legend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29f7f51ba229ced87dfa4e1c978407d9e716ba77115ad38601c49896e0584bb The package sfdc-abstract-legend was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192418 Malicious code in sfdc-abstract-legend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29f7f51ba229ced87dfa4e1c978407d9e716ba77115ad38601c49896e0584bb The package sfdc-abstract-legend was found to contain malicious code. Source: ghsa-malware...

Malicious code in portal-lim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff3dc977380263ed801e45db7d242fb194b66d319545d913fd30087e7c4b274 The package portal-lim was found to contain malicious code. Source: ghsa-malware 9368b862e0bcedf32684551fa238a7364f7214a84bae4597cff992d6ca8b2993 Any...

MAL-2025-192415 Malicious code in portal-lim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff3dc977380263ed801e45db7d242fb194b66d319545d913fd30087e7c4b274 The package portal-lim was found to contain malicious code. Source: ghsa-malware 9368b862e0bcedf32684551fa238a7364f7214a84bae4597cff992d6ca8b2993 Any...

Malicious code in database-mongoose-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df08b31cea7b04dc684cec25582ae2e1877edf126ed8b1963f77c87b4d93de08 The package database-mongoose-kit was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192398 Malicious code in database-mongoose-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df08b31cea7b04dc684cec25582ae2e1877edf126ed8b1963f77c87b4d93de08 The package database-mongoose-kit was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192397 Malicious code in @onlytoodles/crypto-jsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731c33f548ff79b458afc89fa8f3158762537acf2db8d026864792bb3222be7c The package @onlytoodles/crypto-jsa was found to contain malicious code. Source: ghsa-malware...

Malicious code in @onlytoodles/crypto-jsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731c33f548ff79b458afc89fa8f3158762537acf2db8d026864792bb3222be7c The package @onlytoodles/crypto-jsa was found to contain malicious code. Source: ghsa-malware...

Malicious code in wartsila-text-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa25dcd1a96ff24f8f3638d5f052e05a258f9847ef25a146cd479697b26a963 The package wartsila-text-csv was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192402 Malicious code in wartsila-text-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa25dcd1a96ff24f8f3638d5f052e05a258f9847ef25a146cd479697b26a963 The package wartsila-text-csv was found to contain malicious code. Source: ghsa-malware...

Malicious code in serval-integrations-common-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 034a79cdc705d00ab7fb639f1d90c46135f42d8f6cf57eef63bf822adbffac48 The package serval-integrations-common-frontend was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192401 Malicious code in serval-integrations-common-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 034a79cdc705d00ab7fb639f1d90c46135f42d8f6cf57eef63bf822adbffac48 The package serval-integrations-common-frontend was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192400 Malicious code in node-calculator-0d96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a218c7694e38a516577be3b65e74e782080f98629b0cc39516beab80562f57b The package node-calculator-0d96 was found to contain malicious code. Source: ghsa-malware...

Malicious code in malicius-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede57271088779798df2bc6c486e25090d044d8dd9a821c55133d3af2aa46e9e The package malicius-pdf was found to contain malicious code. Source: ghsa-malware df5f61561f8b0dfa30e2b5bf91f7257c1f8672ff2f66928f43c3402b3250e263 A...

MAL-2025-192399 Malicious code in malicius-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede57271088779798df2bc6c486e25090d044d8dd9a821c55133d3af2aa46e9e The package malicius-pdf was found to contain malicious code. Source: ghsa-malware df5f61561f8b0dfa30e2b5bf91f7257c1f8672ff2f66928f43c3402b3250e263 A...

CVE-2025-52493

PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at the configuration page. Although these secrets appear masked as password fields, the actual secret values are present in the page source and can be revealed by simply modifying the input field type from...