@dev-blinq/ai-qa-logic (>=1.0.0, <=1.0.18), @dev-blinq/cucumber_client (>=0.0.1, <=1.0.1749-dev) +6 more potentially affected by CVE-2026-34841 via @usebruno/cli (>=1.40.0, <=2.15.1)

@usebruno/cli NPM version =1.40.0, =1.0.0, =0.0.1, =1.0.428, =1.0.0, =1.0.7 Source cves: CVE-2026-34841 Source advisory: MEND:CVE-2026-34841...

Malware in @dev-blinq/cucumber_client

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...