6532 matches found
MAL-2026-12968 Malicious code in bnpl-blocks-independent-bnpl-scheme (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386248e103371d4e302c8325a3d1b76c4269256b1c374c95f539104230f60149 The package ships a loader loader.js that assembles remote hostnames at runtime from string-split arrays reconstructing subdomains of wel1.ru and a...
MAL-2026-13004 Malicious code in bnpl-blocks-mobile-bnpl-separator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a76b1d07f3d0357fa471ba2b1e5a0052b1b789f96763446a20e19cf7ac7ab11 On require of the package, index.js loads bootstrap.js which fetches a platform-specific binary payload over HTTPS from author-controlled hosts whose...
Malicious code in bnpl-blocks-mobile-bnpl-image-with-caption (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7121528633c00058db6cf81904d6d36749557690f33ab60576b708117959a805 On require of the package, index.js loads polyfill.js which selects a platform-specific endpoint and downloads a binary over HTTPS from one of three...
MAL-2026-12994 Malicious code in bnpl-blocks-mobile-bnpl-image-with-caption (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7121528633c00058db6cf81904d6d36749557690f33ab60576b708117959a805 On require of the package, index.js loads polyfill.js which selects a platform-specific endpoint and downloads a binary over HTTPS from one of three...
@theia/ai-registry (>=1.73.0-next.2, <=1.74.0-next.70), @theia/plugin-dev (>=1.66.0, <=1.74.0-next.70) +4 more potentially affected by CVE-2026-12609 via @theia/plugin-ext (>=1.66.0, <=1.74.0-next.70)
@theia/plugin-ext NPM version =1.66.0, =1.73.0-next.2, =1.66.0, =1.66.0, =1.66.0, =1.66.0, =1.66.0, =1.74.0-next.70 Source cves: CVE-2026-12609 Source advisory: SNYK:JS-THEIAPLUGINEXT-18565098...
MAL-2026-12543 Malicious code in checkout-base-analytics-data (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6130d2e85aedac754a5a7f0d31a255c2f45d702484e6a81df50ca4c326395aa On require of the package's main index.js, the hidden polyfill.js runs a bootstrap routine that selects a platform-specific asset path, fetches an...
MAL-2026-12610 Malicious code in claims-claims-api-adapters (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf35d865ef56cd2fa5863a636bb33bf43d7afe418e9028c3bb73af13470bf63 On require, index.js loads loader.js which selects a platform-specific temp path, downloads a binary over HTTPS from anonymous .workers.dev hosts who...
Malicious code in claims-claims-api-adapters (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf35d865ef56cd2fa5863a636bb33bf43d7afe418e9028c3bb73af13470bf63 On require, index.js loads loader.js which selects a platform-specific temp path, downloads a binary over HTTPS from anonymous .workers.dev hosts who...
MAL-2026-12736 Malicious code in devplatform-react-hooks (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e5dd30e287186df59dd24c05aa269894c259f42c8a2a214d513e55c6510474e On require of the package's main entry index.js - init.js, the module reconstructs a set of Cloudflare Workers hostnames from string-split fragments...
Malicious code in devplatform-react-hooks (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e5dd30e287186df59dd24c05aa269894c259f42c8a2a214d513e55c6510474e On require of the package's main entry index.js - init.js, the module reconstructs a set of Cloudflare Workers hostnames from string-split fragments...
Malicious code in devplatform-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72866f0f03d8960696f4e272cbff49b861cc66557c5250a7d77f90a2310f33c On require'devplatform-sdk', index.js loads polyfill.js which auto-invokes start: it selects a per-OS payload path, fetches a binary from...
Malicious code in devplatform-spa-plugin-ability (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9753b327ec0ed7c7cf204951dd0c1db47db31c79fde8ffad042e8658bb0dc81 On require of the package, index.js loads bootstrap.js which downloads a platform-specific native binary from anonymous Cloudflare Workers hosts...
Malicious code in fb-hr-sites--boxified-form-meetup-subcribe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8aa49d4f3babc81510150e766a38674e971d7553cb05d98b67d0edd24a2fa07 The package's index.js exports an inert class and silently requires./platform inside a swallowed try/catch. On load, platform.js downloads a...
Malicious code in hubert-react-query (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765788871d6200a403058846fe3599c2c59588a6b00efc9ee770d7d1501e1b74 The package's main entry index.js unconditionally requires./setup.js on import. setup.js reconstructs Cloudflare Workers hostnames from string-fragme...
MAL-2026-12294 Malicious code in twork-data-services-ng14-aggregator-api-v2-data-view-user-b2b-create-deal-mf-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd345f2352931f35e602b49b89ce3977c58dc6ad3e70e3164a0144676ee7c4f On require, index.js loads adapter.js, which downloads a platform-specific binary from Cloudflare Workers hosts under oob-worker.cf10x-.workers.dev...
MAL-2026-12268 Malicious code in tinkoff-statist-browser-typed-client-mb.product.tgeofencing (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471fb9b5c8d45abc59ffda97063561b4882d28109c9959c717fbcd0d9f25c00d On require of this package, index.js loads platform.js which assembles remote hostnames at runtime by concatenating fragmented string arrays to hide...
MAL-2026-12281 Malicious code in tinkoff-terminal-kit-test-commons (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68d83a8e515bebce3319c94274060bdfcef42f2ba45e96e87515c9cfd11e020 On require of [email protected], index.js loads adapter.js which selects a platform-specific endpoint, downloads an opaque...
MAL-2026-12162 Malicious code in bigops-customer-processing-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d2fe146d4919092aae053b82b0caacff3789c10e63358f880fa5ab4590b3d2 On require of this package, index.js loads support.js which unconditionally invokes setup. setup assembles C2 hostnames via.join'' from fragmented...
Malicious code in bigops-customer-processing-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d2fe146d4919092aae053b82b0caacff3789c10e63358f880fa5ab4590b3d2 On require of this package, index.js loads support.js which unconditionally invokes setup. setup assembles C2 hostnames via.join'' from fragmented...
CVE-2026-64580
CVE-2026-64580 affects the Linux kernel xfrm6 path. On error when in6_dev_get(dev) returns NULL, xfrm6_fill_dst() releases the device reference with netdev_put() but leaves xdst->u.dst.dev set, causing dst_destroy() to netdev_put(dst->dev) again and double-free the net_device reference, und...