9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +1173 more potentially affected by CVE-2026-94486 via next (>=16.0.0, <=16.3.7)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-94486 Source advisory:...

Malicious code in 9remote (npm)

Source: amazon-inspector 4160b2e2774d56c9e7373db28a4073d456248d0fe9b55979fa507f0910b65ce0 9remote is a remote-shell tool: its CLI launches an HTTP/WebSocket server and provisions a Cloudflare Quick Tunnel that exposes the host to the public internet at a 9remote.cc-fronted URL. Incoming WebSocket...

9remote (>=0.1.0, <=0.1.8), @acvtech5b9/vms-multi-language-locals (>=100.0.0, <=101.0.0) +117 more potentially affected by CVE-2026-23864 via next (>=16.1.0, <=16.1.4)

next NPM version =16.1.0, =0.1.0, =100.0.0, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =0.0.1, =1.0.8, =0.3.0, =0.4.0 and more Source cves: CVE-2026-23864 Source advisory: GHSA-H25M-26QC-WCJF...