Malicious code in napi-raw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d002132bfd19338c8fbc1cc3775c1c8b7be3d059c642881c4dd92be67bf7c895 [email protected] is a near-empty wrapper main exports , no lifecycle scripts whose only effect on install is to declare ltidisafe as a dependency...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack through improper validation of hardlink targets during tar extraction. An attacker can access or modify files outside the intended extraction directory by crafting a malicious tarball with a hardlink entry whose target is...

MAL-2026-5430 Malicious code in @sourceflow-uk/sourceflow-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5bcccc37c380ce54f5bfc2bc2311fbefb6ebc3400a397cbc4afc2188fb3c11d package.json declares a dependency ltidisafe whose version specifier is the raw URL https://storage.googleapis.com/lscunpentest/packuxfoundry.tgz — a...