PYSEC-2026-3518 PraisonAI Slack app_mention bypasses configured user/channel authorization

PraisonAI Slack appmention bypasses configured user/channel authorization Summary PraisonAI's Slack bot applies its configured allowedusers, allowedchannels, and unknown-user pairing policy in the normal Slack message event handler, but not in the adjacent Slack appmention event handler. A Slack...

MAL-2025-33009 Malicious code in serverless-slack-app (npm)

The package serverless-slack-app was found to contain malicious code...

Malicious code in serverless-slack-app (npm)

The package serverless-slack-app was found to contain malicious code...