MAL-2026-10842 Malicious code in @gocortexio/npmgremlinbox-openpbs-2-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a66e3fdf500614035fa89cb285a3a94a898e6890333031745ac4312f6e5caf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10841 Malicious code in @gocortexio/npmgremlinbox-ncgl-uk-2-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00382b16f7bcacbf6333acca5a11b4f1be3a615a64431e0781cf8d9c3877b813 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10818 Malicious code in @gocortexio/npmgremlinbox-epl-1-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52212112115a7a68e8599473664e623f46746dbdc2eea1ff36ccbbc2959c5ccd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10822 Malicious code in @gocortexio/npmgremlinbox-eupl-3-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef5d1488a7448aca043f2c93fd927103279b86134ea8a25e3f86ae29aaa11003 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10821 Malicious code in @gocortexio/npmgremlinbox-eupl-1-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fadc3dc1481610f965f36f4aa49e3cefcae48ce40e0ec2c4f98ef63f62bf00b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10790 Malicious code in @gocortexio/npmgremlinbox-arphic-1999 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59cc9e27f4b008a76815433e388b21dadcb6477f6daee80a855b6eaeaf4a79f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10789 Malicious code in @gocortexio/npmgremlinbox-apsl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7d3ddf2b4ebddd380dc96c807b2288155f0590b0260471b11902d4a0f66dcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10794 Malicious code in @gocortexio/npmgremlinbox-c-uda-1-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83660c96e8a26e9d1536cf10894cf347defb7ff139add7b3ecb738ee69029dfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gocortexio/npmgremlinbox-agpl-1-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ec6a36621ce352ab4510c339ef6a7367f88584b90ebfda17149c79dd947c66 No a static rule matches and no traced installer-harm behaviors were identified in this package version. No lifecycle-script droppers, hardcoded...

Malicious code in @gocortexio/npmgremlinbox-agpl-3-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d73fb2c55c8b46079aed067487fdfbd542e8308ed577463f7d9ab02a7c06447 No a static rule matches and no traced-code findings indicate installer harm in this version. The package artifacts show no credential access, no...

CVE-2026-50289

systeminformation is a System and OS information library for node.js...

MAL-2026-10934 Malicious code in twilio-internal (npm)

The twilio-internal package is one of four byte-identical dependency-confusion squats of Twilio's npm namespace published by user 'yuva2210' maintainer email [email protected], all at the sentinel version 99.99.99 chosen to outrank any internal/private version and win resolution against ...

Linux Distros Unpatched Vulnerability : CVE-2026-63969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: fix possible infinite loop in rt6fillnode Sashiko reported this issue 1. Apply the same fix as commit f8d8ce1b515a ipv6: fix possible infinite loop in...

Linux Distros Unpatched Vulnerability : CVE-2026-63906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: musb: omap2430: Fix use-after-free in omap2430probe In omap2430probe, ofnodeputnp is called prematurely before the last access to np, leading to a...

Linux Distros Unpatched Vulnerability : CVE-2026-64161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: fix ethportsnode leak in probe The error path on ofpropertyreadu32...

Malicious code in aftermath-sui (npm)

The aftermath-sui package was published to the npm registry by user 'jet0010001' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign impersonating the Aftermath Finance SDK Aftermath Finance is a DeFi protocol on the Sui blockchain. The package was...

MAL-2026-10941 Malicious code in aftermath-finance (npm)

The aftermath-finance package was published to the npm registry by user 'jet0010001' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign impersonating the Aftermath Finance SDK Aftermath Finance is a DeFi protocol on the Sui blockchain. The package...

MAL-2026-10958 Malicious code in iphouse-api (npm)

The iphouse-api package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms so...

Linux Distros Unpatched Vulnerability : CVE-2026-64022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: aggregator: remove the software node when deactivating the aggregator The dynamic software node we create for the aggregator platform device when using...

Malicious code in tailwind-gutenberg-block-zero (npm)

The npm package tailwind-gutenberg-block-zero is a supply-chain dropper disguised as a WordPress / Gutenberg block plugin. The published tarball carries the trappings of a real plugin a my-tailwind-blocks.php, a wp-scripts build configuration, a README and a screenshot, but its real behaviour liv...