Untrusted Search Path

Overview Affected versions of this package are vulnerable to Untrusted Search Path through the hostIDReaderBSD.read function in sdk/resource/hostid.go. An attacker can execute a malicious kenv binary by placing it earlier in $PATH and triggering host ID detection on BSD or Solaris systems when...

EUVD-2025-199305

Malicious code in @jayeshsadhwani/telemetry-sdk npm...

EUVD-2025-199309

Malicious code in @hyperlook/telemetry-sdk npm...