CLSA-2026-1792206304 TuxCare security update for @next/bundle-analyzer (9 CVEs)

TuxCare rebuilt @next/bundle-analyzer to address 9 CVEs. Fixed in 16.0.6-tuxcare.7...

CLSA-2026-1792206302 TuxCare security update for @next/bundle-analyzer (9 CVEs)

TuxCare rebuilt @next/bundle-analyzer to address 9 CVEs. Fixed in 14.2.35-tuxcare.5...

CLSA-2026-1792206289 TuxCare security update for @next/bundle-analyzer (2 CVEs)

TuxCare rebuilt @next/bundle-analyzer to address 2 CVEs. Fixed in 12.3.7-tuxcare.8...

CLSA-2026-1792206290 TuxCare security update for @next/bundle-analyzer (13 CVEs)

TuxCare rebuilt @next/bundle-analyzer to address 13 CVEs. Fixed in 13.5.11-tuxcare.14...

Malware in actions-next-bundle-analyzer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...