MAL-2026-3275 Malicious code in @kills_sh/bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7f5c26dc70e3f5d44e3fc5b4b94fba66089cf8d0d718fc48c4f85aada6f830 The package @killssh/bootstrap was found to contain malicious code. Source: ghsa-malware...

GO-2026-4913 Fleet vulnerable to SQL Injection in MDM bootstrap package by authenticated team or global admin in github.com/fleetdm/fleet

Fleet vulnerable to SQL Injection in MDM bootstrap package by authenticated team or global admin in github.com/fleetdm/fleet...

PT-2026-29953

Fleet vulnerable to SQL Injection in MDM bootstrap package by authenticated team or global admin in github.com/fleetdm/fleet...

CVE-2026-34386

Fleet is open source device management software. Prior to 4.81.0, a SQL injection vulnerability in Fleet's MDM bootstrap package configuration allows an authenticated user with Team Admin or Global Admin privileges to modify arbitrary team configurations, exfiltrate sensitive data from the Fleet...

GHSA-VH8F-65QG-3M8J vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2026-26127 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

EUVD-2025-176680

Malicious code in resolvers-chakra-ui-bootstrap-ursa npm...

Malicious code in dione-kastra-public-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e45af73e65c8bb69b8936ef251a668c188721bb919947f8884f6ae981cf02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115985

Malicious code in bootstrap-playwright-levels-browserify npm...

EUVD-2025-116004

Malicious code in bootstrap-blaze-betelgeuse-magellan npm...

EUVD-2025-120290

Malicious code in xenon-ariel-foundation-bootstrap npm...

Malicious code in bootstrap-slidev-luna-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd3f94ac4f1f9ffbfd360578688007afffe72b4e251a09579a1ce567d746749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-hyperion-gemini-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1223a8fe17c4091ebca85d8c9ec163e07248fb1c3978935ed1eed44557b75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140104 Malicious code in bootstrap-fornax-test-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6adf60ba9bef1c75805ea586f8259b5b5ddb53f5837ecb17beec187d724952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140122 Malicious code in bootstrap-standard-yonder-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062ac6199e03c58154dfd853a5ca4b290af0a81c5f809ac9ac34e7cacfdfed49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2021-0849

Malware in sbrugna...

MAL-2025-46603 Malicious code in websockets-tool-backend-bootstrap (npm)

The package websockets-tool-backend-bootstrap was found to contain malicious code...

MAL-2025-22394 Malicious code in hermes-celeste-react-bootstrap-nodejs (npm)

The package hermes-celeste-react-bootstrap-nodejs was found to contain malicious code...

Malicious code in cz-conventional-changelog-resolvers-xenon-bootstrap (npm)

The package cz-conventional-changelog-resolvers-xenon-bootstrap was found to contain malicious code...

Malicious code in baryon-spica-async-bootstrap (npm)

The package baryon-spica-async-bootstrap was found to contain malicious code...