npm package
files-bucket-server
pkg:npm/files-bucket-server
Malware
2 malicious versions on record
One or more versions of this package have been flagged as containing malicious code. Audit any system that installed an affected version.
- MAL-2026-11311Malicious code in files-bucket-server (npm)Jul 30, 2026
- GHSA-xcx3-5pr8-rph9Malware in files-bucket-serverJul 30, 2026
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-8021 | Hig | 7.5 | <= 1.2.6 | — | Jul 23, 2025 | All versions of the package files-bucket-server are vulnerable to Directory Traversal where an attacker can traverse the file system and access files outside of the intended directory. |
- affected <= 1.2.6
All versions of the package files-bucket-server are vulnerable to Directory Traversal where an attacker can traverse the file system and access files outside of the intended directory.