Malicious code in cookie-parsers-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a2885cd84876f478aa25e2b8efddc48e11530aef832f085e0b9d8d114ae481 The package cookie-parsers-env was found to contain malicious code. Source: ghsa-malware...

MAL-2026-678 Malicious code in cookie-parsers-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a2885cd84876f478aa25e2b8efddc48e11530aef832f085e0b9d8d114ae481 The package cookie-parsers-env was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ikeacnalan/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69aa8245ea172b28e43591f47b972fc5e5901c90a4154f6b5962f7a9a3a2e844 The package @ikeacnalan/icons was found to contain malicious code. Source: ghsa-malware...

MAL-2026-676 Malicious code in @ikeacnalan/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69aa8245ea172b28e43591f47b972fc5e5901c90a4154f6b5962f7a9a3a2e844 The package @ikeacnalan/icons was found to contain malicious code. Source: ghsa-malware...

Malicious code in freedom-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4512163cbee4473b3f1fec8504df8a156ada7ac4ca90a763fb9968ba58178ade The package freedom-baileys was found to contain malicious code. Source: ghsa-malware 7c21d9105c9c9c7f67546b69fd620327c3b304280b1113d557601d49a0639cd...

Malicious code in supun-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a334e071b736bf620c4a29e4ec2bbaaf59bc6c3d3ab7b44603e19e9a8d95d8e9 The package supun-baileys was found to contain malicious code. Source: ghsa-malware 43ec7bfea6bfa4e623dfafee2f6f8843915886935b0d44ad5d6de4b52f72cb41...

Malicious code in baileys-dtz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 109634c377dbfbc10a7374fb473b28d85fcd47c764895f0c5e685a1f974a0120 The package baileys-dtz was found to contain malicious code. Source: ghsa-malware 14a91b23d2ef0b2dede76b5344cd84626e539f40e791d84f2a793b34d285e196 An...

MAL-2026-675 Malicious code in supun-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a334e071b736bf620c4a29e4ec2bbaaf59bc6c3d3ab7b44603e19e9a8d95d8e9 The package supun-baileys was found to contain malicious code. Source: ghsa-malware 43ec7bfea6bfa4e623dfafee2f6f8843915886935b0d44ad5d6de4b52f72cb41...

CVE-2026-24936

When a specific function is enabled while joining a AD Domain from ADM, an improper input parameters validation vulnerability in a specific CGI program allowing an unauthenticated remote attacker to write arbitrary data to any file on the system. By exploiting this vulnerability, attackers can...

MAL-2026-665 Malicious code in transform-exponentiation-operator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b79481ce559cb600cfe4b2897847eb06d38b5cbe4ef456339cbbac7b240e60 The package transform-exponentiation-operator was found to contain malicious code. Source: ghsa-malware...

Malicious code in transform-react-display-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad21ba0cb042f576642dd61d0639ac6da6cec5a468ff7b5cf0aab9164667bcb0 The package transform-react-display-name was found to contain malicious code. Source: ghsa-malware...

MAL-2026-668 Malicious code in typescript-react-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ad53847415b01595a09cd7ec959129e610fe93b14b7f3ea880816bee2c8e97 The package typescript-react-apollo was found to contain malicious code. Source: ghsa-malware...

Malicious code in transform-async-generator-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338773642b9997fc33cd7f4eb7cfbca20019115fc184de55077b8b112a45dcc4 The package transform-async-generator-functions was found to contain malicious code. Source: ghsa-malware...

MAL-2026-667 Malicious code in typed-document-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aee62441fa4b75c4aee1044c18d8043570ba9e43b3034ce3ea6ae70aabf8373 The package typed-document-node was found to contain malicious code. Source: ghsa-malware...

Malicious code in netlify-project-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2c95931ae7b5a6c572ebecb2cd096bd4cef37bcf61a440cbb2338062f4a836 The package netlify-project-helper was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-5316

When a specific function is enabled while joining a AD Domain from ADM, an improper input parameters validation vulnerability in a specific CGI program allowing an unauthenticated remote attacker to write arbitrary data to any file on the system. By exploiting this vulnerability, attackers can...

Malicious code in vite-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dde7d42b0bc5236d827ba62c883fbf14b643e368ef8a4b0f7b5430a35183254 The package vite-ui-components was found to contain malicious code. Source: ghsa-malware...

MAL-2026-669 Malicious code in vite-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dde7d42b0bc5236d827ba62c883fbf14b643e368ef8a4b0f7b5430a35183254 The package vite-ui-components was found to contain malicious code. Source: ghsa-malware...

MAL-2026-659 Malicious code in atg-atgse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a895bff954a7aac56b4897d5f8582caded83251256152d5f9b7d55a53eedca The package atg-atgse was found to contain malicious code. Source: ghsa-malware c7041c7bfbb06e2e710b58e8aeff432e4774d756db057975426c046c7ea06339 Any...

Malicious code in jshint-groups (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf7ad9a58a15b025d84def4a32761ec77338fbcda7ef3ae459602eacfaf4595 The package jshint-groups was found to contain malicious code. Source: ghsa-malware fe1d6fde4a749fdb784071c856d26761b12fdceffae0020f2492a4a845eb04f4...