Malicious code in @emerald-react/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2815333a388587f547d8608d454b6a1d515deb92df2ed79d8c77a7fc4d26e1c5 The package @emerald-react/core was found to contain malicious code...

MAL-2026-1603 Malicious code in @emerald-react/checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d32a1bb5753affaccc3f875ba482d2565c062a5eb65862620595a84309ff3f The package @emerald-react/checkbox was found to contain malicious code...

MAL-2026-1602 Malicious code in @emerald-react/chat-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0a6cbe19a31d336779d3e0975557852cb92372627904ed87950dfe35b67410 The package @emerald-react/chat-bot was found to contain malicious code...

Malicious code in @emerald-react/button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a53b07341310aa38bec5a12c64977afb8a97b940baf599f6e8d632417b9997e The package @emerald-react/button was found to contain malicious code...

MAL-2026-1601 Malicious code in @emerald-react/button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a53b07341310aa38bec5a12c64977afb8a97b940baf599f6e8d632417b9997e The package @emerald-react/button was found to contain malicious code...

MAL-2026-1599 Malicious code in @emerald-react/badge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1fd9db354fb18abad1dbf02e1dd5ceb8235067ff25c71c2b9a5fe274e08594 The package @emerald-react/badge was found to contain malicious code...

Malicious code in @emerald-react/badge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1fd9db354fb18abad1dbf02e1dd5ceb8235067ff25c71c2b9a5fe274e08594 The package @emerald-react/badge was found to contain malicious code...

Malicious code in @emerald-react/avatar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3683097454908b17afa3726cc9519d1e62c51f5b8932235470cbf0efcfb27099 The package @emerald-react/avatar was found to contain malicious code...

MAL-2026-1598 Malicious code in @emerald-react/avatar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3683097454908b17afa3726cc9519d1e62c51f5b8932235470cbf0efcfb27099 The package @emerald-react/avatar was found to contain malicious code...

Malicious code in @commonschema/blackstone-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f3edc28bea0e512a6dcee373cec98f067d76a64791869cfe843a2434edca05 The package @commonschema/blackstone-core was found to contain malicious code...

MAL-2026-1595 Malicious code in @commonschema/blackstone-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f3edc28bea0e512a6dcee373cec98f067d76a64791869cfe843a2434edca05 The package @commonschema/blackstone-core was found to contain malicious code...

MAL-2026-1593 Malicious code in @cbreone/utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31471b3974ae749750afb01ba4ff12659b1fd6494074e836252926e064df6a32 The package @cbreone/utilities was found to contain malicious code...

MAL-2026-1592 Malicious code in @cbreone/survey-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa512020ca8dd602c54abcdc6b69379bc5656423a35dabd5200db0e3b8af7fd6 The package @cbreone/survey-ui was found to contain malicious code...

Malicious code in @cbreone/core-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae6ae37b27a798985e4dcf5adf27c7fe173717d253c4fab67acf96656bb9f8b The package @cbreone/core-services was found to contain malicious code...

MAL-2026-1588 Malicious code in @bingads-webui-help/apex.core.v3.min (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87351101634ee5726eaa0ee76ecaec8529226c993a610ea5a2d1b7521778bd5a The package @bingads-webui-help/apex.core.v3.min was found to contain malicious code...

Malicious code in @at-point/valiant-widgets-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87532b33037ce0d72b75f2ca654c5b66bf97048b3d1226ca6bdb396af6670c4a The package @at-point/valiant-widgets-v2 was found to contain malicious code...

MAL-2026-1585 Malicious code in @anchor-ds/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aaac3fbc20e4d10a4fcf379fa4637f05e1dccd9fb6123bdd9b0e26ce5e21854 The package @anchor-ds/core was found to contain malicious code...

Malicious code in @anchor-ds/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aaac3fbc20e4d10a4fcf379fa4637f05e1dccd9fb6123bdd9b0e26ce5e21854 The package @anchor-ds/core was found to contain malicious code...

Arbitrary File Read

github.com/kedacore/keda is vulnerable to Arbitrary File Read. The vulnerability is due to insufficient path validation when loading the Service Account Token from spec.hashiCorpVault.credential.serviceAccount, which allows an attacker with permission to create or modify a TriggerAuthentication...

MAL-2026-1542 Malicious code in bugbounty-test-123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c22630300fe50578818f50f4a068d400f9e434dc0341fff5a6cd0ca63e82d5e1 The package bugbounty-test-123 was found to contain malicious code. Source: ossf-package-analysis...