MAL-2026-1937 Malicious code in @dotprompt/promptly-darwin-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 120d702f1e340ffdca19411824d16c6b6f381c53e0cb3e123982aaba2d013458 The package @dotprompt/promptly-darwin-arm64 was found to contain malicious code. Source: ghsa-malware...

CVE-2026-24051

OpenTelemetry-Go is the Go implementation of OpenTelemetry. The OpenTelemetry Go SDK in version v1.20.0-1.39.0 is vulnerable to Path Hijacking Untrusted Search Paths on macOS/Darwin systems. The resource detection code in sdk/resource/hostid.go executes the ioreg system command using a search pat...

CVE-2026-24051

OpenTelemetry-Go is the Go implementation of OpenTelemetry. The OpenTelemetry Go SDK in version v1.20.0-1.39.0 is vulnerable to Path Hijacking Untrusted Search Paths on macOS/Darwin systems. The resource detection code in sdk/resource/hostid.go executes the ioreg system command using a search pat...

EUVD-2003-1404

Malware in sbrugna...

EUVD-2004-1121

Malware in sbrugna...

EUVD-2003-0417

Malware in sbrugna...

EUVD-2003-0049

Malware in sbrugna...

EUVD-2003-0418

Malware in sbrugna...

EUVD-2005-2196

Malware in sbrugna...

EUVD-2006-5820

Malware in sbrugna...

EUVD-2003-1403

Malware in sbrugna...

EUVD-2003-0050

Malware in sbrugna...

EUVD-2003-0048

Malware in sbrugna...

EUVD-2003-0416

Malware in sbrugna...

EUVD-2003-0415

Malware in sbrugna...

EUVD-2003-0496

Malware in sbrugna...

EUVD-2025-3035

Malicious code in bioql PyPI...

EUVD-2024-22164

Malicious code in bioql PyPI...

Arbitrary code execution during build on Darwin in cmd/go

...

PT-2025-35889

Name of the Vulnerable Software and Affected Versions: darwin-mlir-converter affected versions not specified Description: The ConvertReductionOp function within darwinn mlir converter aidl.cc contains a heap buffer overflow, potentially leading to a local escalation of privilege. Exploitation doe...