Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the glob npm package

Summary Due to use of the glob npm package, DevOps Test Performance and Rational Performance Tester contain a potential command injection vulnerability. Vulnerability Details CVEID:CVE-2025-64756 DESCRIPTION: Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior t...

Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the Connect2id Nimbus JOSE + JWT library

Summary Due to use of the Connect2id Nimbus JOSE + JWT library, DevOps Test Performance and Rational Performance Tester contain a potential Denial of Service DoS vulnerability. Vulnerability Details CVEID:CVE-2025-53864 DESCRIPTION: Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x...

Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the npm semver package

Summary Due to use of the npm semver package, DevOps Test Performance and Rational Performance Tester contain a potential Regular Expression Denial of Service ReDoS vulnerability. Vulnerability Details CVEID:CVE-2022-25883 DESCRIPTION: Versions of the package semver before 7.5.2 are vulnerable to...

Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the Node.js on-headers middleware

Summary Due to use of the Node.js on-headers middleware, DevOps Test Performance and Rational Performance Tester contain an Improper Handling of Unexpected Data Type vulnerability, potentially enabling header manipulation. Vulnerability Details CVEID:CVE-2025-7339 DESCRIPTION: on-headers is a...

Malicious code in requests-test-test44 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-2812 Malicious code in requests-test-test44 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in requests-test-test3 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-2811 Malicious code in requests-test-test3 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in requests-test-test2 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bombonsec-test-123 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-2809 Malicious code in bombonsec-test-123 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in insomnia-smoke-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20f87230976f7fcf435b5b1634ece69387ac24c3965ac13143b99a96269264f The package insomnia-smoke-test was found to contain malicious code...

MAL-2026-2775 Malicious code in insomnia-smoke-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20f87230976f7fcf435b5b1634ece69387ac24c3965ac13143b99a96269264f The package insomnia-smoke-test was found to contain malicious code...

MAL-2026-2765 Malicious code in ghscan-pkgcheck-test-001 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867757df0e86dde6839938aaabe7b5c9574bf49dae685032524081e87f8b3435 The package ghscan-pkgcheck-test-001 was found to contain malicious code...

Malicious code in ghscan-pkgcheck-test-001 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867757df0e86dde6839938aaabe7b5c9574bf49dae685032524081e87f8b3435 The package ghscan-pkgcheck-test-001 was found to contain malicious code...

MAL-2026-2736 Malicious code in buildkite-test-collector-vitest-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912ffea9e65720bd5b35e83949fe2f51e7ae71ac918133a5dd2c6d971b5947f4 The package buildkite-test-collector-vitest-example was found to contain malicious code...

Malicious code in buildkite-test-collector-vitest-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912ffea9e65720bd5b35e83949fe2f51e7ae71ac918133a5dd2c6d971b5947f4 The package buildkite-test-collector-vitest-example was found to contain malicious code...

MAL-2026-2735 Malicious code in buildkite-test-collector-playwright-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f3f80367ea53fbaf542c199729a13115d8d848157327188cf365303af1d1f3 The package buildkite-test-collector-playwright-example was found to contain malicious code...

Malicious code in buildkite-test-collector-playwright-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f3f80367ea53fbaf542c199729a13115d8d848157327188cf365303af1d1f3 The package buildkite-test-collector-playwright-example was found to contain malicious code...

Malicious code in buildkite-test-collector-mocha-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37fbbae0cc3cfcba7b18566c1ab1f61417b1776206c3d0317956058c43ef61fa The package buildkite-test-collector-mocha-example was found to contain malicious code...