MAL-2026-2344 Malicious code in codeanalysis-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074f4becc66a4df6fc176ded01c8ab217ae4bbc356a0c843a8258af14692f159 The package codeanalysis-common was found to contain malicious code...

CVE-2026-33700

creationtimestamp| type| source ---|---|--- 2026-03-24 15:16:35+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33700...

CVE-2026-33473

creationtimestamp| type| source ---|---|--- 2026-03-24 15:16:33+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33473...

CVE-2026-4742

creationtimestamp| type| source ---|---|--- 2026-03-24 03:17:30+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4742...

CVE-2026-4737

creationtimestamp| type| source ---|---|--- 2026-03-24 03:17:27+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4737...

CVE-2026-4736

creationtimestamp| type| source ---|---|--- 2026-03-24 03:17:26+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4736...

CVE-2026-4679

creationtimestamp| type| source ---|---|--- 2026-03-24 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260324 2026-03-24 02:24:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrjgvilqj2p 2026-03-24 02:49:36+00:00|...

CVE-2026-3533

creationtimestamp| type| source ---|---|--- 2026-03-24 00:05:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhrbo36xep2p 2026-03-24 00:23:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrcp2nvyn2s...

CVE-2026-33634

CVE-2026-33634 is tied to a supply-chain compromise involving Aqua Security Trivy. Concrete details show: (1) affected items include Trivy binary/image v0.69.4, and GitHub Actions components aquasecurity/trivy-action (versions 0.0.1–0.34.2, 76/77 forced-pushed) and aquasecurity/setup-trivy (0.2.0...

CVE-2026-33680

creationtimestamp| type| source ---|---|--- 2026-03-23 21:45:26+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-8hp8-9fhr-pfm9 2026-03-24 15:16:35+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33680...

CVE-2026-33678

creationtimestamp| type| source ---|---|--- 2026-03-23 21:45:15+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-jfmm-mjcp-8wq2 2026-03-24 15:16:35+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33678...

CVE-2026-33677

creationtimestamp| type| source ---|---|--- 2026-03-23 21:45:06+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-7c2g-p23p-4jg3 2026-03-24 15:16:35+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33677...

CVE-2026-33675

creationtimestamp| type| source ---|---|--- 2026-03-23 21:44:48+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-g66v-54v9-52pr 2026-03-24 15:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33675...

CVE-2026-33679

creationtimestamp| type| source ---|---|--- 2026-03-23 21:44:39+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-g9xj-752q-xh63 2026-03-24 15:16:35+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33679...

CVE-2026-33668

creationtimestamp| type| source ---|---|--- 2026-03-23 21:44:30+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-94xm-jj8x-3cr4 2026-03-24 15:16:34+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33668...

CVE-2026-32851

creationtimestamp| type| source ---|---|--- 2026-03-23 19:16:27+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-32851...

CVE-2026-32852

creationtimestamp| type| source ---|---|--- 2026-03-23 19:16:27+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-32852...

CVE-2026-32850

creationtimestamp| type| source ---|---|--- 2026-03-23 19:16:26+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-32850...

CVE-2026-33532

creationtimestamp| type| source ---|---|--- 2026-03-23 18:31:32+00:00| published-proof-of-concept| https://github.com/eemeli/yaml/security/advisories/GHSA-48c2-rrv3-qjmp 2026-03-26 19:16:15+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33532 2026-03-27...

CVE-2026-4593

creationtimestamp| type| source ---|---|--- 2026-03-23 16:16:57+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4593...