MAL-2026-15531 Malicious code in confluence-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7615f50c489336db7800ea3b79ef26a4e5af311f0484ee31871000e329c2813 package.json declares a dependency whose value is a bare HTTPS URL https://repo.securityctrl.com/confluence-editor rather than a semver range publish...

CVE-2026-55779

Silverstripe Versioned provides versioning for Silverstripe models. Prior to 3.2.1, RestoreAction::getRestoreMessage in src/RestoreAction.php builds ArchiveAdmin restore notifications rendered as CASTHTML and inserts $restoredItem-Title, $restoredItem-URLSegment, $restoredItem-CMSEditLink, and...

MAL-2026-15532 Malicious code in confluence-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d314e75faa527b1c10dbc34b2867180fb0726f2547d9b0edd0564aec3e38fd8 package.json declares a self-referential dependency whose key equals the package's own name confluence-rest and whose value is the bare HTTPS URL...

Malicious code in ir-annuities-client-authentication-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d813fc9c0831847a602c97803b7e53603edfb6acef4386e4cde2927c2a7a297 package.json declares a dependency whose key equals the package's own name ir-annuities-client-authentication-module and whose value is a plain HTTPS...

MAL-2026-15539 Malicious code in loading-performance-instrumentation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27dab9307010475c57195f838ba7d7299fe4a753b92926536aa8376f8d096150 package.json line 11 declares a dependency whose source is a bare URL rather than a registry version range: "loading-performance-instrumentation":...

MAL-2026-15528 Malicious code in axis-datagrid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8e97884917400dda89c79754629edd51961e893d64fa580de04bb82bd0cab3 package.json declares a dependency whose key equals the package's own name axis-datagrid and whose source is the bare HTTPS URL...

MAL-2026-15545 Malicious code in ux-metrics-client-interaction-subscriber (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6066e87b7b0822678d3514839bc7eba18d46ff1d034c12ea169f4c3513df132b package.json line 11 declares a dependency whose key equals the package's own name ux-metrics-client-interaction-subscriber and whose value is a bare...

MAL-2026-15540 Malicious code in mkt-ui-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec25e8ea6f31c47fb8d4f491a39477d5fde2b00f41c3c1b19960931a34f990e6 package.json declares a dependency whose key "mkt-ui-library" equals the package's own name and whose value is a bare HTTPS URL,...

Malicious code in firestore-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3242d5a15b769961bcc2e6d24747a7da27e2afd293ea83e6b042eceeb4b97de2 package.json declares a single dependency whose value is a bare HTTP URL https://repo.securityctrl.com/firestore-lite rather than a registry version...

MAL-2026-15534 Malicious code in firestore-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3242d5a15b769961bcc2e6d24747a7da27e2afd293ea83e6b042eceeb4b97de2 package.json declares a single dependency whose value is a bare HTTP URL https://repo.securityctrl.com/firestore-lite rather than a registry version...

Malicious code in librastandardlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519c28eb8d9df0a16d93e1b1c486f1ad4a9092a9bf958aed56f273cfe1fcfc14 package.json at line 11 declares a dependency whose key equals the package's own name librastandardlib and whose value is an off-registry HTTPS URL...

MAL-2026-15538 Malicious code in librastandardlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519c28eb8d9df0a16d93e1b1c486f1ad4a9092a9bf958aed56f273cfe1fcfc14 package.json at line 11 declares a dependency whose key equals the package's own name librastandardlib and whose value is an off-registry HTTPS URL...

MAL-2026-15546 Malicious code in vui-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0411fd70c7f76d71355fcd1ab650dac43afefc55b802d86ad4755b06456bb1ad package.json declares a dependency whose key equals this package's own name vui-gateway and whose source is an off-registry HTTPS URL,...

Malicious code in jira-projects-backbone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75bb5293b51dc977d699982756ea69987397ce86f50d12753844198bf40294c package.json line 11 declares a dependency whose key equals the package's own name jira-projects-backbone with a value that is a bare HTTPS URL,...

Malicious code in data-value (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1f0fee2d6635331e603f520ba2954b11ac9e85bbd5b66f27c18be5940c3041 package.json declares the package's own name 'data-value' as a dependency whose source is an arbitrary HTTPS URL...

Malicious code in oit-lib-oracle-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a2d32099a0c4246e0b8711f8b29d321b7d1c3a0a99e36edc367934fc9f34f3 package.json declares a dependency whose key oit-lib-oracle-util matches this package's own name and whose value is a bare HTTPS URL —...

Malicious code in gridster-coords (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245882b881fde3396fcb6e1e14f8b0014fc64cd1d02d27f101c8fd2a0b16c944 package.json line 11 declares the dependency 'gridster-coords' as the bare HTTPS URL https://repo.securityctrl.com/gridster-coords instead of a...

MAL-2026-15535 Malicious code in gridster-coords (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245882b881fde3396fcb6e1e14f8b0014fc64cd1d02d27f101c8fd2a0b16c944 package.json line 11 declares the dependency 'gridster-coords' as the bare HTTPS URL https://repo.securityctrl.com/gridster-coords instead of a...

Malicious code in amplitude-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489592652dd724254e29c10536019e0e03e8032e781748a73fc357bb40f50a1d package.json declares a single dependency whose source is a bare HTTPS URL https://repo.securityctrl.com/amplitude-react-native rather than a registr...

MAL-2026-15519 Malicious code in qbo-ui-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7391c0f366c6339b3c6c75a1e891d1123cc4483ba3c01eedc20ebbbe3dfc48a7 package.json line 11 declares a self-referential dependency whose source is a bare HTTP URL rather than a registry version range: "qbo-ui-services":...