MAL-2026-11935 Malicious code in @servicetitan/titan-chat-ui (npm)

npm/@servicetitan/titan-chat-ui is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @servicetitan/titan-chat-ui (npm)

npm/@servicetitan/titan-chat-ui is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @servicetitan/titan-chat-ui-cypress (npm)

npm/@servicetitan/titan-chat-ui-cypress is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized...

Malicious code in @servicetitan/titan-chat-ui-common (npm)

npm/@servicetitan/titan-chat-ui-common is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized...

MAL-2026-11937 Malicious code in @servicetitan/titan-chat-ui-common (npm)

npm/@servicetitan/titan-chat-ui-common is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized...

Unsafe Dependency Resolution

Overview @theia/ai-chat-ui is a Theia - AI Chat UI Extension Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the automatic loading of .prompts/.prompttemplate files in a workspace. An attacker can manipulate the AI agent's system instructions by introducing...

@theia/ai-claude-code (>=1.65.0, <=1.70.2), @theia/ai-codex (>=1.67.0-next.56, <=1.70.2) +5 more potentially affected by CVE-2026-46580 via @theia/ai-chat-ui (>=1.57.0, <=1.70.2)

@theia/ai-chat-ui NPM version =1.57.0, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.70.2 Source cves: CVE-2026-46580 Source advisory: OSV:GHSA-M973-PR9R-HP2W...

@theia/ai-claude-code (>=1.65.0, <=1.70.2), @theia/ai-codex (>=1.67.0-next.56, <=1.70.2) +5 more potentially affected by CVE-2026-46580 via @theia/ai-chat-ui (>=1.57.0, <=1.70.2)

@theia/ai-chat-ui NPM version =1.57.0, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.70.2 Source cves: CVE-2026-46580 Source advisory: SNYK:JS-THEIAAICHATUI-17391844...

@theia/ai-claude-code (>=1.65.0, <=1.70.2), @theia/ai-codex (>=1.67.0-next.56, <=1.70.2) +5 more potentially affected by CVE-2026-22551 via @theia/ai-chat-ui (>=1.57.0, <=1.70.2)

@theia/ai-chat-ui NPM version =1.57.0, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.70.2 Source cves: CVE-2026-22551 Source advisory: SNYK:JS-THEIAAICHATUI-17391865...

@theia/ai-claude-code (>=1.65.0, <=1.70.2), @theia/ai-codex (>=1.67.0-next.56, <=1.70.2) +5 more potentially affected by CVE-2026-44688 via @theia/ai-chat-ui (>=1.57.0, <=1.70.2)

@theia/ai-chat-ui NPM version =1.57.0, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.70.2 Source cves: CVE-2026-44688 Source advisory: SNYK:JS-THEIAAICHATUI-17391851...

@theia/ai-claude-code (>=1.65.0, <=1.70.2), @theia/ai-codex (>=1.67.0-next.56, <=1.70.2) +5 more potentially affected by CVE-2026-44688 via @theia/ai-chat-ui (>=1.57.0, <=1.70.2)

@theia/ai-chat-ui NPM version =1.57.0, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.70.2 Source cves: CVE-2026-44688 Source advisory: OSV:GHSA-3JWW-HXQJ-WFQ2...

@theia/ai-claude-code (>=1.65.0, <=1.70.2), @theia/ai-codex (>=1.67.0-next.56, <=1.70.2) +5 more potentially affected by CVE-2026-22551 via @theia/ai-chat-ui (>=1.57.0, <=1.70.2)

@theia/ai-chat-ui NPM version =1.57.0, =1.65.0, =1.67.0-next.56, =1.63.0, =1.62.0, =1.60.0-next.43, =1.57.0-next.37, =1.68.0-next.79, =1.70.2 Source cves: CVE-2026-22551 Source advisory: OSV:GHSA-QWJM-9C66-W4Q4...

Unsafe Dependency Resolution

Overview @theia/ai-chat-ui is a Theia - AI Chat UI Extension Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the processing of workspace file and directory names in the AI chat. An attacker can cause the agent to execute attacker-controlled instructions by...

@theia/ai-chat-ui (>=1.46.0-next.241, <=1.70.2), @theia/ai-claude-code (>=1.65.0, <=1.70.2) +8 more potentially affected by CVE-2026-22551 via @theia/ai-chat (>=1.46.0-next.241, <=1.70.2)

@theia/ai-chat NPM version =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.67.0-next.56, =0.0.1, =1.62.0, =1.59.0-next.62, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.58.5 Source cves: CVE-2026-22551 Source advisory: OSV:GHSA-QWJM-9C66-W4Q4...

Malicious Package

Overview @capibar.chat/ui-kit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in one-view-chat-ui-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a53a27e69da28c6b1eb4c8f441a2e0723e4b7b5c0aaaab08233f5dd41b76308 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview one-view-chat-ui-module is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

EUVD-2025-208909

SyncFusion 30.1.37 is vulnerable to Cross Site Scripting XSS via the Document-Editor reply to comment field and Chat-UI Chat message...

CVE-2025-63260

SyncFusion 30.1.37 is affected by a Cross-Site Scripting (XSS) vulnerability exposed through the Document-Editor’s reply-to-comment field and the Chat-UI chat messages. The issues are present in the UI components of SyncFusion for version 30.1.37 and are described consistently across Red Hat and ...

@like-a-startup/matildex-chat (>=1.0.8, <=1.0.14), @n8n/chat (>=0.46.0, <=0.68.0) +3 more potentially affected by CVE-2026-25054 via @n8n/design-system (>=1.88.0, <=1.110.0)

@n8n/design-system NPM version =1.88.0, =1.0.8, =0.46.0, =1.0.0, =1.0.4 - navis-n8n-chat-ui 1.0.1 Source cves: CVE-2026-25054 Source advisory: SNYK:JS-N8NDESIGNSYSTEM-15225250...