Malicious code in cryonics-yaml-meteor-subscription (npm)

The package cryonics-yaml-meteor-subscription was found to contain malicious code...

Malicious code in quito-subscription-gridsome-airbnb (npm)

The package quito-subscription-gridsome-airbnb was found to contain malicious code...

Malicious code in sagitta-package-subscription-google (npm)

The package sagitta-package-subscription-google was found to contain malicious code...

Malicious code in geomorphology-leda-subscription-magellan (npm)

The package geomorphology-leda-subscription-magellan was found to contain malicious code...

MAL-2025-37407 Malicious code in typeorm-subscription-biohacking-phenomic (npm)

The package typeorm-subscription-biohacking-phenomic was found to contain malicious code...

Malicious code in css-loader-phoebe-pino-subscription (npm)

The package css-loader-phoebe-pino-subscription was found to contain malicious code...

MAL-2025-22124 Malicious code in hadron-volcanology-subscription-auth (npm)

The package hadron-volcanology-subscription-auth was found to contain malicious code...

MAL-2025-15050 Malicious code in auriga-soap-subscription-shelljs (npm)

The package auriga-soap-subscription-shelljs was found to contain malicious code...

MAL-2025-34332 Malicious code in sync-subscription-foundation-procyon (npm)

The package sync-subscription-foundation-procyon was found to contain malicious code...

MAL-2025-32634 Malicious code in sagitta-package-subscription-google (npm)

The package sagitta-package-subscription-google was found to contain malicious code...

MAL-2025-39025 Malicious code in webpack-lepton-xenos-subscription (npm)

The package webpack-lepton-xenos-subscription was found to contain malicious code...

MAL-2025-34147 Malicious code in subscription-futurology-transform-parcel (npm)

The package subscription-futurology-transform-parcel was found to contain malicious code...

MAL-2025-39092 Malicious code in weywot-subscription-mechatronics-miranda (npm)

The package weywot-subscription-mechatronics-miranda was found to contain malicious code...

MAL-2025-33632 Malicious code in solarnebula-sequelize-subscription-biogeochemistry (npm)

The package solarnebula-sequelize-subscription-biogeochemistry was found to contain malicious code...

MAL-2025-33895 Malicious code in standard-rehype-cosmiconfig-subscription (npm)

The package standard-rehype-cosmiconfig-subscription was found to contain malicious code...

CVE-2025-44004

Mattermost Confluence Plugin version 1.5.0 fails to check the authorization of the user to the Mattermost instance which allows attackers to create a channel subscription without proper authorization via API call to the create channel subscription endpoint...

CVE-2025-49221

Mattermost Confluence Plugin version 1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to access subscription details without via API call to GET subscription endpoint...

CVE-2025-54525

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription endpoint with an invalid request body...

CVE-2025-54458

Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the Confluence space which allows attackers to create a subscription for a Confluence space the user does not have access to via the create subscription endpoint...

CVE-2025-53910

Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the channel which allows attackers to create a channel subscription without proper access to the channel via API call to the edit channel subscription endpoint...