Malicious code in windmill-elderberry-gcsv (npm)

The package windmill-elderberry-gcsv was found to contain malicious code...

Malicious code in windmill-ginkgo-ti06 (npm)

The package windmill-ginkgo-ti06 was found to contain malicious code...

Malicious code in windmill-violet-emp2 (npm)

The package windmill-violet-emp2 was found to contain malicious code...

Malicious code in windmill-yacht-ovlz (npm)

The package windmill-yacht-ovlz was found to contain malicious code...

Malicious code in zulu-windmill-o3ly (npm)

The package zulu-windmill-o3ly was found to contain malicious code...

Malicious code in papa-windmill-d18h (npm)

The package papa-windmill-d18h was found to contain malicious code...

Malicious code in quasar-windmill-hhsy (npm)

The package quasar-windmill-hhsy was found to contain malicious code...

MAL-2025-39319 Malicious code in windmill-ginkgo-ti06 (npm)

The package windmill-ginkgo-ti06 was found to contain malicious code...

MAL-2025-41221 Malicious code in zulu-windmill-o3ly (npm)

The package zulu-windmill-o3ly was found to contain malicious code...

MAL-2025-31195 Malicious code in quasar-windmill-hhsy (npm)

The package quasar-windmill-hhsy was found to contain malicious code...

MAL-2025-39318 Malicious code in windmill-elderberry-gcsv (npm)

The package windmill-elderberry-gcsv was found to contain malicious code...

MAL-2025-39317 Malicious code in windmill-blackhole-ztfa (npm)

The package windmill-blackhole-ztfa was found to contain malicious code...

MAL-2025-39320 Malicious code in windmill-violet-emp2 (npm)

The package windmill-violet-emp2 was found to contain malicious code...

MAL-2025-28763 Malicious code in papa-windmill-d18h (npm)

The package papa-windmill-d18h was found to contain malicious code...

MAL-2025-22305 Malicious code in hazel-windmill-tyeg (npm)

The package hazel-windmill-tyeg was found to contain malicious code...

MAL-2025-39321 Malicious code in windmill-yacht-ovlz (npm)

The package windmill-yacht-ovlz was found to contain malicious code...

windmill-cli (>=0.0.1 <=0.0.13) potentially affected by CVE-2025-55152 via @oakserver/oak (>=12.6.2 <=14.1.0)

@oakserver/oak NPM version =12.6.2, =0.0.1, =0.0.13 Source cves: CVE-2025-55152 Source advisory: OSV:GHSA-R3V7-PC4G-7XP9...

windmill-cli (>=0.0.1 <=0.0.13) potentially affected by CVE-2025-55152 via @oakserver/oak (>=12.6.2 <=14.1.0)

@oakserver/oak NPM version =12.6.2, =0.0.1, =0.0.13 Source cves: CVE-2025-55152 Source advisory: SNYK:JS-OAKSERVEROAK-11735294...

CVE-2024-8462

A vulnerability was found in Windmill 1.380.0. It has been classified as problematic. Affected is an unknown function of the file backend/windmill-api/src/users.rs of the component HTTP Request Handler. The manipulation leads to improper restriction of excessive authentication attempts. It is...

windmill-cli (>=0.0.1 <=0.0.13) potentially affected by CVE-2024-49770 via @oakserver/oak (>=12.6.2 <=14.1.0)

@oakserver/oak NPM version =12.6.2, =0.0.1, =0.0.13 Source cves: CVE-2024-49770 Source advisory: OSV:GHSA-QM92-93FV-VH7M...