Malicious code in checkout-base-test (npm)

Source: amazon-inspector 3b7f73dabdc94daaab90ab1d45fafabe4ba6c223dd00c4f989f8237c9ecd54b2 On require of this package, index.js loads helpers.js which runs at import time. The module assembles three attacker-controlled hostnames from split string fragments joined at runtime...

Malicious code in checkout-base-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7f73dabdc94daaab90ab1d45fafabe4ba6c223dd00c4f989f8237c9ecd54b2 On require of this package, index.js loads helpers.js which runs at import time. The module assembles three attacker-controlled hostnames from split...

MAL-2026-12544 Malicious code in checkout-base-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7f73dabdc94daaab90ab1d45fafabe4ba6c223dd00c4f989f8237c9ecd54b2 On require of this package, index.js loads helpers.js which runs at import time. The module assembles three attacker-controlled hostnames from split...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (>=5.6.5, <=6.8.0), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=8.10.0) +262 more potentially affected by CVE-2026-45367 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (>=0.0.1, <=6.9.5)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version =0.0.1, =5.6.5, =4.0.0, =5.6.5, =4.1.0, =4.0.3, =4.1.0, =4.0.0, =4.0.0, =5.0.0, =4.0.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =8.10.0 and more Source cves: CVE-2026-45367 Source advisory: MEND:CVE-2026-45367...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (>=5.7.7, <=5.7.9), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.7.0, <=5.7.9) +60 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.r4 (5.6.27)

ca.uhn.hapi.fhir:org.hl7.fhir.r4 MAVEN version 5.6.27 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r4 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin =5.7.7, =5.7.0, =5.7.7, =5.7.0, =5.7.0...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (>=6.2.0, <=6.2.5), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.2.0, <=6.2.5) +83 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.6.68)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.6.68 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin =6.2.0, =6.2.0,...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (5.6.5), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.6.0, <=5.6.5) +38 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.5.7)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin 5.6.5 -...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (5.6.5), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.6.0, <=5.6.5) +53 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.r4 (5.5.7)

ca.uhn.hapi.fhir:org.hl7.fhir.r4 MAVEN version 5.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r4 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin 5.6.5 -...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (6.4.1), ca.uhn.hapi.fhir:hapi-fhir-base-test-mindeps-client (6.4.1) +51 more potentially affected by CVE-2026-55471 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.97)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.97 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin 6.4.1 -...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (6.8.0), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.6.0, <=8.10.0) +188 more potentially affected by CVE-2026-55470 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (>=6.0.0, <=6.9.9)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version =6.0.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =8.10.0 and more Source cves: CVE-2026-55470 Source advisory: OSV:GHSA-FXJ4-P9XP-37V5...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (>=5.7.7, <=5.7.9), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.7.0, <=5.7.9) +54 more potentially affected by CVE-2026-55470 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.27)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version 5.6.27 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin =5.7.7, =5.7.0, =5.7.7, =5.7.0,...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (6.4.0), ca.uhn.hapi.fhir:hapi-fhir-cli-api (6.4.0) +30 more potentially affected by CVE-2026-55470 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.881)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version 5.6.881 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin 6.4.0 -...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (6.4.0), ca.uhn.hapi.fhir:hapi-fhir-cli-api (6.4.0) +30 more potentially affected by CVE-2026-45367 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.881)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version 5.6.881 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin 6.4.0 -...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (>=6.2.0, <=6.2.5), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.2.0, <=6.2.5) +85 more potentially affected by CVE-2026-45367 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.68)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version 5.6.68 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin =6.2.0, =6.2.0, =6.2.0, =6.2.0,...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (6.8.0), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.6.0, <=8.10.0) +187 more potentially affected by CVE-2026-45367 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (>=6.0.0, <=6.9.5)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version =6.0.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =8.10.0 - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-uhnfhirtest 6.8.0 and more Source cves: CVE-2026-45367 Source advisory:...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (6.8.0), ca.uhn.hapi.fhir:hapi-fhir-base-test-mindeps-client (>=6.6.0, <=7.4.5) +199 more potentially affected by CVE-2026-45367 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (>=6.0.0, <=6.9.5)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version =6.0.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =8.10.0 and more Source cves: CVE-2026-45367 Source advisory: OSV:GHSA-3653-68V6-RQ57...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (5.6.5), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.6.0, <=5.6.5) +53 more potentially affected by CVE-2026-45367 via ca.uhn.hapi.fhir:org.hl7.fhir.r4 (5.5.7)

ca.uhn.hapi.fhir:org.hl7.fhir.r4 MAVEN version 5.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r4 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin 5.6.5 -...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (>=6.0.3, <=6.1.3), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.1.3) +67 more potentially affected by CVE-2026-45367 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.6.36)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.6.36 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin =6.0.3, =6.0.0,...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (5.6.5), ca.uhn.hapi.fhir:hapi-fhir-base-test-mindeps-client (5.6.5) +57 more potentially affected by CVE-2026-45367 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (5.5.7)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version 5.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin 5.6.5 -...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (>=6.4.2, <=6.4.7), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.2, <=6.4.7) +74 more potentially affected by CVE-2026-45367 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (5.6.971)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 5.6.971 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin =6.4.2, =6.4.2,...