Malicious code in webpack-lepton-xenos-subscription (npm)

The package webpack-lepton-xenos-subscription was found to contain malicious code...

Malicious code in typeorm-subscription-biohacking-phenomic (npm)

The package typeorm-subscription-biohacking-phenomic was found to contain malicious code...

Malicious code in cryonics-yaml-meteor-subscription (npm)

The package cryonics-yaml-meteor-subscription was found to contain malicious code...

Malicious code in quito-subscription-gridsome-airbnb (npm)

The package quito-subscription-gridsome-airbnb was found to contain malicious code...

Malicious code in standard-rehype-cosmiconfig-subscription (npm)

The package standard-rehype-cosmiconfig-subscription was found to contain malicious code...

Malicious code in geomorphology-leda-subscription-magellan (npm)

The package geomorphology-leda-subscription-magellan was found to contain malicious code...

Malicious code in weywot-subscription-mechatronics-miranda (npm)

The package weywot-subscription-mechatronics-miranda was found to contain malicious code...

Malicious code in callisto-subscription-selenology-cybernetics (npm)

The package callisto-subscription-selenology-cybernetics was found to contain malicious code...

MAL-2025-15050 Malicious code in auriga-soap-subscription-shelljs (npm)

The package auriga-soap-subscription-shelljs was found to contain malicious code...

MAL-2025-34146 Malicious code in subscription-cross-env-dione-protractor (npm)

The package subscription-cross-env-dione-protractor was found to contain malicious code...

MAL-2025-34332 Malicious code in sync-subscription-foundation-procyon (npm)

The package sync-subscription-foundation-procyon was found to contain malicious code...

MAL-2025-32634 Malicious code in sagitta-package-subscription-google (npm)

The package sagitta-package-subscription-google was found to contain malicious code...

MAL-2025-39092 Malicious code in weywot-subscription-mechatronics-miranda (npm)

The package weywot-subscription-mechatronics-miranda was found to contain malicious code...

MAL-2025-34147 Malicious code in subscription-futurology-transform-parcel (npm)

The package subscription-futurology-transform-parcel was found to contain malicious code...

MAL-2025-34148 Malicious code in subscription-virgo-cosmiconfig-nodemon (npm)

The package subscription-virgo-cosmiconfig-nodemon was found to contain malicious code...

CVE-2025-49221

Mattermost Confluence Plugin version 1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to access subscription details without via API call to GET subscription endpoint...

CVE-2025-54525

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription endpoint with an invalid request body...

CVE-2025-44004

Mattermost Confluence Plugin version 1.5.0 fails to check the authorization of the user to the Mattermost instance which allows attackers to create a channel subscription without proper authorization via API call to the create channel subscription endpoint...

CVE-2025-54458

Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the Confluence space which allows attackers to create a subscription for a Confluence space the user does not have access to via the create subscription endpoint...

CVE-2025-53910

Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the channel which allows attackers to create a channel subscription without proper access to the channel via API call to the edit channel subscription endpoint...