Malicious code in kjj81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4c29ba9ea960c7f8e350f68be2c3a6dc320bc3e230be0fb6c8f30d186b1417 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-17207 Malicious code in kjj81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4c29ba9ea960c7f8e350f68be2c3a6dc320bc3e230be0fb6c8f30d186b1417 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-17210 Malicious code in uuid-date (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1794c1dba5ffb902f0c8011a60990baff7cf5ebc1f90ab634937734944696995 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uuid-date (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1794c1dba5ffb902f0c8011a60990baff7cf5ebc1f90ab634937734944696995 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17208 Malicious code in riot-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b944a9e85b91a70a2c0f84390f4537b2b1babed308cb23c165bf61bc20a91769 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in riot-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b944a9e85b91a70a2c0f84390f4537b2b1babed308cb23c165bf61bc20a91769 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vinzzsync-wacli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6515588ac57ec4218f28d221b4c94d785d9455f03c0c6ae27b97fc66fdd6db5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-17211 Malicious code in vinzzsync-wacli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6515588ac57ec4218f28d221b4c94d785d9455f03c0c6ae27b97fc66fdd6db5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-17209 Malicious code in tanksync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45dcd24fc5596e9273938687d6878a8927fcdf9ffd63982034556e84c3339065 The package's advertised API downloads a JavaScript file over HTTPS and executes it via spawn'node', payloadPath, detached: true.unref, leaving the...

Malicious code in tanksync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45dcd24fc5596e9273938687d6878a8927fcdf9ffd63982034556e84c3339065 The package's advertised API downloads a JavaScript file over HTTPS and executes it via spawn'node', payloadPath, detached: true.unref, leaving the...

Malicious code in @consts/links (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ddcbc6f472b5dba063f65d700ffb3669e4b33c439ec16445d623240b028202a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17202 Malicious code in @consts/links (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ddcbc6f472b5dba063f65d700ffb3669e4b33c439ec16445d623240b028202a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @digi-kernel/digi-kernel-constrains (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cf968a9064d02510a559a3850f8fbbda22f6fc038605569e6f6939a139aa115 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17203 Malicious code in @digi-kernel/digi-kernel-constrains (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cf968a9064d02510a559a3850f8fbbda22f6fc038605569e6f6939a139aa115 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-87799: Improper Link Resolution Before File Access

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...

ROS-20260928-73-0089

The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

ROS-20260928-73-0088

The vulnerability of the Linux operating system’s kernel Bluetooth module is related to reading data from buffer fields beyond their allowable limits. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

ROS-20260928-73-0003

The vulnerability of the vmwcmddma function in the drivers/gpu/drm/vmwgfx/vmwgfxexecbuf.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-85185: Improper Limitation of a Pathname to a Restricted Directory

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...

PT-2026-99889

Name of the Vulnerable Software and Affected Versions Canonical LXD versions 4.0.2 through 4.0.13 Canonical LXD versions 5.0.0 through 5.0.9 Canonical LXD versions 5.21.0 through 5.21.7 Canonical LXD versions 6.0.0 through 6.9.x Description A path traversal issue exists in the btrfs storage drive...