Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets

A GitHub issue opened by an account with no repository privileges was enough to execute code on the CI runners behind Anthropic's and Google's own coding-agent repositories. On OpenAI's, it was enough to hijack the next agent run. Novee Security ran the attack against each vendor's agent in the...

DEBIAN-CVE-2026-64652

GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...

CVE-2026-64652

GitHub CLI gh is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output tha...

MAL-2026-13448 Malicious code in lib-frontsga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a65c44cfdcbc89df47508f3f87fcab836f1fa2f4adf2298ecfb47cd6088038 Package name 'lib-frontsga' published to the public npm registry at version 9.999.999 targets an internal package name via dependency-confusion...

MAL-2026-12676 Malicious code in delivery-ci-microforms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffef831e876b8114ebfd6559d38f34d2c559dd42263845899e45ee621aa15c7 On require'delivery-ci-microforms', index.js loads support.js which selects a platform-specific endpoint whose hostname is reassembled at runtime fro...

MAL-2026-12677 Malicious code in delivery-ci-notify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf92bb7d56497b7cc6eb6b7b04a210fb531faa624a9c1b97e830fbf745d6258 On require of delivery-ci-notify, index.js loads shim.js which selects a platform-specific asset, downloads a native binary from one of three hardcod...

Malicious code in delivery-ci-notify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf92bb7d56497b7cc6eb6b7b04a210fb531faa624a9c1b97e830fbf745d6258 On require of delivery-ci-notify, index.js loads shim.js which selects a platform-specific asset, downloads a native binary from one of three hardcod...

Malicious code in delivery-ci-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a6fb547c4fb156493439557692dc83b73f44deee6687ec535882f7e8ccf490 Requiring delivery-ci-validate loads polyfill.js, which assembles destination hostnames from split string fragments joined at runtime e.g...

MAL-2026-12679 Malicious code in delivery-ci-quality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a7deac8b6933e5d38da84c365f65ac4fbcf7b3a26825914d19ca7aeafcf516 On require of the package, index.js unconditionally loads compat.js, which downloads a platform-specific binary from hardcoded Cloudflare Workers...

MAL-2026-12680 Malicious code in delivery-ci-sage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b54c7175e494e683cdbc63814267aa5544f88d0373b929b9f0fe3fcb8202bd3 On require of the package, index.js loads loader.js which selects a platform-specific asset path and fetches a binary from one of four...

MAL-2026-12686 Malicious code in delivery-ci-upgrade-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c49d0422f51d7d7937c6a2b133b12ac6f4c6f1b914f03e9a6ad558e1b0f09fce index.js unconditionally requires./runtime at module load. runtime.js detects platform/arch and downloads an OS-specific binary linuxx64, linuxarm64,...

MAL-2026-12681 Malicious code in delivery-ci-storybook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f7c5d9585ed160843f93122a7c6f3bda50165c4118618ad7aac0bd1b302069 On require of delivery-ci-storybook, index.js loads bridge.js which downloads a platform-specific executable from one of three anonymous Cloudflare...

Malicious code in dc-renewals-layout2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6219fbfa414c89e001a734c3cdebf2c059981f1777c937f513198c21e3cbd113 The package's preinstall script auto-runs on npm install and issues a plaintext HTTP GET to http://75.119.137.232:31337/depconfuse carrying the...

MAL-2026-12815 Malicious code in widget-forge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc77fe941595018023e8382eac28ffdf8d1b000217a0e4d01e56e7bb48ac2d8 [email protected] is a dependency-confusion beacon. package.json declares scripts.preinstall = 'node callback.js', which auto-runs on npm install...

MAL-2026-12511 Malicious code in application_base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73797279861276dbe0ee846487e1a6c4206ae7c5c97cf5c18b478d78d9f2ffb7 [email protected] runs callback.js from its preinstall lifecycle hook on npm install. The script collects os.hostname, os.userInfo.username,...

Malicious code in application_base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73797279861276dbe0ee846487e1a6c4206ae7c5c97cf5c18b478d78d9f2ffb7 [email protected] runs callback.js from its preinstall lifecycle hook on npm install. The script collects os.hostname, os.userInfo.username,...

Malicious code in editor_application (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5914405fc5126f1abcc621e835b7e71774fb1b49cc51d5f02e808292769eb25 package.json declares a preinstall hook that runs node callback.js, which on npm install collects host-level identifiers os.hostname, os.userInfo...

MAL-2026-12801 Malicious code in sc-payment-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b75d6f50386e1c630638fb334a8de08ad5fd2e1b7811ce63e2c6a64d7e3a09 [email protected] declares a preinstall script that executes callback.js on npm install. The script collects host identity os.hostname,...

Malicious code in sc-payment-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b75d6f50386e1c630638fb334a8de08ad5fd2e1b7811ce63e2c6a64d7e3a09 [email protected] declares a preinstall script that executes callback.js on npm install. The script collects host identity os.hostname,...

Malicious code in dust-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e08146748974a55b50e565bc0ae7fc1788c9b8a28858536c697505032334310 On npm install, the package's preinstall script runs node callback.js, which collects os.hostname, os.userInfo.username, process.cwd,...