Malicious Package

Overview chat-adapter-zoom is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview box-react-uix is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview slds-lsp-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview enbd-react-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview tme-xca-react is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview tme-xca is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to improper timeout management during network read operations in the receive loop. An attacker can cause the application to become unresponsive or crash by sending specially crafted network packets. Details...

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the downloadBlob function. An attacker can cause the application to access memory outside the bounds of an allocated array by sending specially crafted requests, resulting in a denial-of-service...

Missing Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Missing Authorization via the message mutation handling process. An attacker can perform privileged operations by exploiting misconfigured input paths to bypass requester authorization...

Symlink Attack

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Symlink Attack via the mirror sync process. An attacker can bypass policy checks and authorization boundaries by exploiting remote symlink parents when the feature is enabled and reachabl...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via misconfigured input paths in Discord guild actions. An attacker can execute restricted operations by bypassing cross-provider requester authorization checks...

Incorrect Authorization

Overview @openclaw/discord is an OpenClaw Discord channel plugin Affected versions of this package are vulnerable to Incorrect Authorization via misconfigured input paths in Discord guild actions. An attacker can execute restricted operations by bypassing cross-provider requester authorization...

Incorrect Authorization

Overview @openclaw/feishu is an OpenClaw Feishu/Lark channel plugin community maintained by @m1heng Affected versions of this package are vulnerable to Incorrect Authorization in the feishu process. An attacker can perform unauthorized operations by exploiting insufficient authorization checks on...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization in the feishu process. An attacker can perform unauthorized operations by exploiting insufficient authorization checks on certain actions, allowing lower-trust...

Use of Incorrectly-Resolved Name or Reference

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference in the flock process. An attacker can gain unauthorized access to execute or persist actions beyond their intended authorization by leveragin...

Incorrect Authorization

Overview @openclaw/feishu is an OpenClaw Feishu/Lark channel plugin community maintained by @m1heng Affected versions of this package are vulnerable to Incorrect Authorization due to the Feishu permission tools process. An attacker can gain unauthorized access to perform privileged actions by...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization due to the Feishu permission tools process. An attacker can gain unauthorized access to perform privileged actions by exploiting the lack of proper authorization...

Missing Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Missing Authorization via the HTTP model override process. An attacker can gain unauthorized access to restricted operations by exploiting misconfigured input paths. Remediation Upgrade...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the plugin install process. An attacker can perform unauthorized actions by bypassing intended authorization checks when the affected feature is enabled and...

Incorrect Permission Assignment for Critical Resource

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the MCP loopback process. An attacker can gain unauthorized access to owner-level tools by exploiting configured input paths to...

Incorrect Permission Assignment for Critical Resource

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the plugin install process. An attacker can gain elevated privileges and perform unauthorized actions by exploiting misconfigured...

Server-side Request Forgery (SSRF)

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the CDP discovery process. An attacker can access restricted network destinations by submitting blocked WebSocket URLs when the affected feature is...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the web search process. An attacker can gain unauthorized access to restricted operations by exploiting misconfigured input paths. Remediation Upgrade openclaw...

Incomplete List of Disallowed Inputs

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via improper filtering of environment variables in the host exec process. An attacker can gain unauthorized access or perform actions beyond their...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the group ID validation process. An attacker can gain unauthorized access to actions requiring higher privileges by leveraging WhatsApp group IDs to satisfy...

Incomplete List of Disallowed Inputs

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the host exec environment filtering process. An attacker can gain unauthorized access and execute or persist actions beyond their intended...

Use of Weak Hash

Overview wandb is an A CLI and library for interacting with the Weights and Biases API. Affected versions of this package are vulnerable to Use of Weak Hash through ArtifactManifestEntry.download in wandb/sdk/artifacts/artifactmanifestentry.py and related artifact verification paths. An attacker...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization through insufficient authorization checks in the ExportController web routes for creating and editing export templates. An attacker can gain unauthorized access to create or modify global export templates by direct...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the authentication process. An attacker can gain unauthorized access to the REST API by replaying the KIMAISESSION cookie obtained after password verification, bypassing the second authentication factor...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the rate editing process for projects, customers, and activities. An attacker can modify billing-related rate configurations outside their authorized scope by combining an authorized...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization through insufficient authorization checks in the postMemberAction and postActivityAction API endpoints. An attacker can expand their management scope to add users or activities outside their authorized visibility b...

Insecure Default Initialization of Resource

Overview Affected versions of this package are vulnerable to Insecure Default Initialization of Resource through the use of a default APPSECRET value in the Docker deployment process. An attacker can gain unauthorized access to any user account, including administrative accounts, by forging...

Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the stop and restart API endpoints. An attacker can cause unauthorized timesheet state changes by tricking an authenticated user into visiting a malicious page, leading to manipulation of time records...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization through the restart and duplicate processes. An attacker can continue to create new timesheet entries for projects they no longer have access to by leveraging historical timesheet records after their permissions ha...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the activity creation process when a user with the createactivity permission accesses the preset project creation route directly. An attacker can create new activities under unauthorized projects by specifying ...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the PATCH /api/timesheets/id and POST /api/timesheets endpoints, which accept a user-supplied project ID that is resolved through a query builder allowing the submitted ID to bypass...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the cgetAction process of the timesheet API endpoint, which fails to properly enforce teamlead authorization checks when accessing other users' timesheet records. An attacker can access sensitive timesheet dat...

Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF through the GET endpoints responsible for team creation and object binding. An attacker can cause unauthorized changes to team membership and permission structures by tricking a logged-in user with...

Improper Check for Certificate Revocation

Overview app-store-server-library is a The App Store Server Library Affected versions of this package are vulnerable to Improper Check for Certificate Revocation in the SignedDataVerifier process when online revocation checking is enabled. An attacker can cause the acceptance of revoked...

Infinite loop

Overview json-repair is an A package to repair broken json strings Affected versions of this package are vulnerable to Infinite loop via the resolveschema function. An attacker can cause the application to enter an infinite loop and exhaust CPU resources by submitting a specially crafted JSON...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication in the twoFactorValidationAction process. An attacker can gain unauthorized access to any 2FA-enabled user account, including administrative accounts, by sending unauthenticated POST requests containing only the...

Malicious Package

Overview stella-ai-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Symlink Attack

Overview flash-attention is a Flash Attention2 operator on Huawei Ascend 910A. Affected versions of this package are vulnerable to Symlink Attack via the downloadandcopy function in hopper/setup.py when extracting archives without validating symlinks or filtering tar members. An attacker can...

Server-side Request Forgery (SSRF)

Overview crewai-tools is a Set of tools for the crewAI framework Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the URL fetch logic in the scraping loaders and website scraping tools, including DocsSiteLoader, DOCXLoader, PDFLoader, loadfromurl,...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through the instance registration and proxy handling in InstanceRegistry and InstanceWebProxy. An attacker can make the server send outbound HTTP requests to arbitrary internal addresses and exfiltrate...

Malicious Package

Overview type-astr is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview nodemon-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview nodemon-eslint is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview type-unique is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview nodemon-web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...