CVE-2026-85654

Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mcp-server before 2.1.6 might allow a context-dependent actor to execute arbitrary code on the host that deploys the generated application via crafted table, index, or attribute...

Malicious code in cdk-integ-tools (npm)

The package cdk-integ-tools was found to contain malicious code. --- Credit: OpenSSF source...

CVE-2026-85654: Improper Neutralization of Special Elements Used in a Template Engine

Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mcp-server before 2.1.6 might allow a context-dependent actor to execute arbitrary code on the host that deploys the generated application via crafted table, index, or attribute...

PT-2026-86207

Name of the Vulnerable Software and Affected Versions awslabs.dynamodb-mcp-server versions prior to 2.1.6 Description Improper neutralization of special elements used in a template engine within the CDK generator allows a context-dependent actor to execute arbitrary code on the host deploying the...

Malicious code in aws-ecs-devops-using-aws-cdk (npm)

--- Credit: OpenSSF source...

GO-2026-6093 AWS CDK CodeBuild S3 Log Encryption Boolean Inversion in github.com/aws/aws-cdk-go/awscdk

AWS CDK CodeBuild S3 Log Encryption Boolean Inversion in github.com/aws/aws-cdk-go/awscdk...

PT-2026-80340

AWS CDK CodeBuild S3 Log Encryption Boolean Inversion in github.com/aws/aws-cdk-go/awscdk...

Malicious code in eacq-cdk (npm)

Source: amazon-inspector 0fdb6bb562df94959130d84e06dc14aa40e9347c60da24dd32ce672024c2e0aa Requiring the package executes init.js, which selects a platform-specific payload path and fetches an executable over HTTPS from Cloudflare Workers hosts whose names are assembled via.join'' from...

MAL-2026-13513 Malicious code in eacq-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fdb6bb562df94959130d84e06dc14aa40e9347c60da24dd32ce672024c2e0aa Requiring the package executes init.js, which selects a platform-specific payload path and fetches an executable over HTTPS from Cloudflare Workers...

Malicious Package

Overview cdk-insights is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in cdk-sagemaker-notebook-workflow (npm)

Source: amazon-inspector 6cc9c1db01ca14b294be21438478ec14dc6549a4b7b9ec5cf73dd7aa227f7ad8 The package declares a preinstall hook node index.js in package.json that fires automatically on npm install. The script collects os.hostname, os.userInfo.username, os.platform, current working directory, ho...

Malicious code in cdk-insights (npm)

Source: amazon-inspector fa41acb776dbedfe93c37899783a5e54b78017ac31576c798a27eae6b9e9ec89 The package contains code in dist/entry.js and dist/index.js that invokes npm publish programmatically combined with writeFileSync operations — the canonical wormable auto-publication pattern enumerate...

Malicious code in leo-cdk-lib (npm)

The leo-cdk-lib npm package was compromised as part of the Miasma worm campaign targeting the LeoPlatform npm ecosystem. On June 24, 2026, 20 LeoPlatform packages were published within a 3-second window by a threat actor who had taken over the npm account czirker belonging to the LeoPlatform...

Malicious code in @ethlete/cdk (npm)

Source: amazon-inspector 388964a1e683fdb11adf39ffe9b97f4114b9bcd9547f941d27adb4fccff22add The package was found to contain malicious code or consuming dependency that contains malicious code Source: google-open-source-security a6c7977dbc054cdb7fe56da0d2fbd26e2a6fed695deb4263ccbf4adfedd86acb The...

cloud.pianola:cdk-fluent-assertions (>=1.0.0, <=1.0.1), com.cloudcamphq:aws-runtime (0.0.1) +768 more potentially affected by unknown CVE via software.amazon.awscdk:aws-cdk-lib (>=2.0.0-rc.27, <=2.252.0)

software.amazon.awscdk:aws-cdk-lib MAVEN version =2.0.0-rc.27, =1.0.0, =1.0.8, =1.0.8, =1.0.8, =1.0.8, =1.0.8, =2.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-464C-974J-9XM6...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +613 more potentially affected by unknown CVE via aws-cdk-lib (>=2.0.0-alpha.4, <=2.252.0)

aws-cdk-lib NPM version =2.0.0-alpha.4, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =1.2.15, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.7.28 and more Source cves: unknown CVE Source advisory: GHSA-464C-974J-9XM6...

apus-cli (0.0.21), asaas-cdk-constructs (0.1.0) +182 more potentially affected by unknown CVE via aws-cdk-lib (>=2.0.0, <=2.240.0)

aws-cdk-lib PYPI version =2.0.0, =0.0.1, =0.0.3, =2.6.4, =2.82.0a0, =0.0.0, =2.73.0a0, =2.73.0a0, =2.73.0a0, =2.73.0a0, =2.91.0a0, =2.73.0a0, =2.73.0a0, =2.95.1a0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-464C-974J-9XM6...

@104corp/cdk-aws-codedeploy-on-premises (>=1.0.0, <=1.0.2), @abletest/able (>=0.0.1, <=0.0.4) +274 more potentially affected by unknown CVE via @aws-cdk/aws-codebuild (>=1.75.0, <=1.204.0)

@aws-cdk/aws-codebuild NPM version =1.75.0, =1.0.0, =0.0.1, =0.1.0, =1.0.6, =1.0.0, =1.1.0-GqlExtensibility.1, =1.2.0-geo.0, =0.0.1, =4.13.3-beta.0, =7.6.26-npm-pkg-cli.0, =7.6.27-alpha.5030, =1.1.0-ext1.0, =1.75.0, =1.0.0, =1.204.0 and more Source cves: unknown CVE Source advisory:...

@104corp/cdk-aws-codedeploy-on-premises (>=1.0.0, <=1.0.2), @abletest/able (>=0.0.1, <=0.0.4) +274 more potentially affected by unknown CVE via @aws-cdk/aws-codebuild (>=1.75.0, <=1.204.0)

@aws-cdk/aws-codebuild NPM version =1.75.0, =1.0.0, =0.0.1, =0.1.0, =1.0.6, =1.0.0, =1.1.0-GqlExtensibility.1, =1.2.0-geo.0, =0.0.1, =4.13.3-beta.0, =7.6.26-npm-pkg-cli.0, =7.6.27-alpha.5030, =1.1.0-ext1.0, =1.75.0, =1.0.0, =1.204.0 and more Source cves: unknown CVE Source advisory:...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +613 more potentially affected by unknown CVE via aws-cdk-lib (>=2.0.0-alpha.4, <=2.252.0)

aws-cdk-lib NPM version =2.0.0-alpha.4, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =1.2.15, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.7.28 and more Source cves: unknown CVE Source advisory: OSV:GHSA-464C-974J-9...