Malicious code in vega-hermes-websockets-slides (npm)

The package vega-hermes-websockets-slides was found to contain malicious code...

MAL-2025-34750 Malicious code in terser-aldebaran-run-script-websockets (npm)

The package terser-aldebaran-run-script-websockets was found to contain malicious code...

MAL-2025-21726 Malicious code in google-websockets-deneb-enif (npm)

The package google-websockets-deneb-enif was found to contain malicious code...

MAL-2025-39050 Malicious code in websockets-pm2-standard-carpo (npm)

The package websockets-pm2-standard-carpo was found to contain malicious code...

Malicious code in google-websockets-deneb-enif (npm)

The package google-websockets-deneb-enif was found to contain malicious code...

Malicious code in publish-superagent-websockets-gulp (npm)

The package publish-superagent-websockets-gulp was found to contain malicious code...

MAL-2025-30822 Malicious code in publish-superagent-websockets-gulp (npm)

The package publish-superagent-websockets-gulp was found to contain malicious code...

MAL-2025-15696 Malicious code in biohacking-radiant-websockets-link (npm)

The package biohacking-radiant-websockets-link was found to contain malicious code...

MAL-2025-15201 Malicious code in avior-antares-adonis-websockets (npm)

The package avior-antares-adonis-websockets was found to contain malicious code...

MAL-2025-27682 Malicious code in nodejs-prettier-plugin-markdown-terraforming-websockets (npm)

The package nodejs-prettier-plugin-markdown-terraforming-websockets was found to contain malicious code...

Malicious code in express-websockets-sedna-mongodb (npm)

The package express-websockets-sedna-mongodb was found to contain malicious code...

Malicious code in biohacking-radiant-websockets-link (npm)

The package biohacking-radiant-websockets-link was found to contain malicious code...

Malicious code in chromedriver-websockets-altair-superagent (npm)

The package chromedriver-websockets-altair-superagent was found to contain malicious code...

Malicious code in terser-aldebaran-run-script-websockets (npm)

The package terser-aldebaran-run-script-websockets was found to contain malicious code...

Malicious code in websockets-pm2-standard-carpo (npm)

The package websockets-pm2-standard-carpo was found to contain malicious code...

MAL-2025-17402 Malicious code in command-avior-websockets-jekyll (npm)

The package command-avior-websockets-jekyll was found to contain malicious code...

MAL-2025-17003 Malicious code in chromedriver-websockets-altair-superagent (npm)

The package chromedriver-websockets-altair-superagent was found to contain malicious code...

MAL-2025-20089 Malicious code in express-websockets-sedna-mongodb (npm)

The package express-websockets-sedna-mongodb was found to contain malicious code...

MAL-2025-38189 Malicious code in vega-hermes-websockets-slides (npm)

The package vega-hermes-websockets-slides was found to contain malicious code...

Missing Origin Validation in WebSockets

Overview Affected versions of this package are vulnerable to Missing Origin Validation in WebSockets via the CheckOrigin function in the api/terminal.go file. An attacker can execute arbitrary commands on the target system by tricking an authenticated user into visiting a malicious web page that...