Malicious code in catqrcodeconverter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3333f7b95e551ebf6ed266fb1de661b7419520ed3a922b05910ede132c7d6757 Package [email protected] wires both preinstall and postinstall lifecycle hooks in package.json to execute scripts/run.js. On npm install,...

MAL-2026-16435 Malicious code in catqrcodeconverter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3333f7b95e551ebf6ed266fb1de661b7419520ed3a922b05910ede132c7d6757 Package [email protected] wires both preinstall and postinstall lifecycle hooks in package.json to execute scripts/run.js. On npm install,...

Malicious code in eslint-plugin-i18n-shreddit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a22687900b0decfe83eda7516ec5c5169401894c98be27d115e5dffe64fc902 [email protected] ships no ESLint plugin code; the tarball's only function is a postinstall hook scripts.postinstall = 'node index.j...

MAL-2026-16437 Malicious code in eslint-plugin-i18n-shreddit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a22687900b0decfe83eda7516ec5c5169401894c98be27d115e5dffe64fc902 [email protected] ships no ESLint plugin code; the tarball's only function is a postinstall hook scripts.postinstall = 'node index.j...

CVE-2026-52744: Missing Authorization

GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal GoCD UI fetch-artifact auto-suggestion API at /go/api/internal/pipelines//upstream does not adequately authorize access to upstream dependency data. An authenticated user can retrieve inter-pipeline dependency hierarchy...

homeassistant-stubs (2021.6.3) potentially affected by CVE-2026-91130 via homeassistant (2021.6.3)

homeassistant PYPI version 2021.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.6.3 Source cves: CVE-2026-91130 Source advisory: OSV:GHSA-WX4M-69M9-GX3M...

homeassistant-stubs (2022.6.2), pytest-homeassistant-custom-component (0.9.12) potentially affected by CVE-2026-91130 via homeassistant (2022.6.2)

homeassistant PYPI version 2022.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.6.2 - pytest-homeassistant-custom-component 0.9.12 Source cves: CVE-2026-91130 Source advisory:...

homeassistant-stubs (2023.2.2), pytest-homeassistant-custom-component (0.12.54) potentially affected by CVE-2026-91130 via homeassistant (2023.2.2)

homeassistant PYPI version 2023.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.2.2 - pytest-homeassistant-custom-component 0.12.54 Source cves: CVE-2026-91130 Source advisory:...

homeassistant-stubs (2023.6.0b2), pytest-homeassistant-custom-component (0.13.33) potentially affected by CVE-2026-91130 via homeassistant (2023.6.0b2)

homeassistant PYPI version 2023.6.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.6.0b2 - pytest-homeassistant-custom-component 0.13.33 Source cves: CVE-2026-91130 Source advisory:...

homeassistant-stubs (2023.5.3), pytest-homeassistant-custom-component (0.13.31) potentially affected by CVE-2026-91130 via homeassistant (2023.5.3)

homeassistant PYPI version 2023.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.5.3 - pytest-homeassistant-custom-component 0.13.31 Source cves: CVE-2026-91130 Source advisory:...

homeassistant-stubs (2023.11.0b5), pytest-homeassistant-custom-component (0.13.73) potentially affected by CVE-2026-91130 via homeassistant (2023.11.0b5)

homeassistant PYPI version 2023.11.0b5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.11.0b5 - pytest-homeassistant-custom-component 0.13.73 Source cves: CVE-2026-91130 Source advisory:...

homeassistant-stubs (2022.4.0), pytest-homeassistant-custom-component (0.8.5) potentially affected by CVE-2026-91130 via homeassistant (2022.4.0)

homeassistant PYPI version 2022.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.4.0 - pytest-homeassistant-custom-component 0.8.5 Source cves: CVE-2026-91130 Source advisory:...

pytest-homeassistant-custom-component (0.8.9) potentially affected by CVE-2026-91130 via homeassistant (2022.4.4)

homeassistant PYPI version 2022.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - pytest-homeassistant-custom-component 0.8.9 Source cves: CVE-2026-91130 Source advisory: OSV:GHSA-WX4M-69M9-GX3M...

pytest-homeassistant-custom-component (0.5.7) potentially affected by CVE-2026-91130 via homeassistant (2021.12.3)

homeassistant PYPI version 2021.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - pytest-homeassistant-custom-component 0.5.7 Source cves: CVE-2026-91130 Source advisory: OSV:GHSA-WX4M-69M9-GX3M...

homeassistant-stubs (2022.12.5), pytest-homeassistant-custom-component (0.12.33) potentially affected by CVE-2026-91130 via homeassistant (2022.12.5)

homeassistant PYPI version 2022.12.5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.12.5 - pytest-homeassistant-custom-component 0.12.33 Source cves: CVE-2026-91130 Source advisory:...

fauxmo (>=0.3.5, <=0.3.6) potentially affected by CVE-2026-91130 via homeassistant (0.31.1)

homeassistant PYPI version 0.31.1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - fauxmo =0.3.5, =0.3.6 Source cves: CVE-2026-91130 Source advisory: OSV:GHSA-WX4M-69M9-GX3M...

homeassistant-stubs (2022.12.0b3), pytest-homeassistant-custom-component (0.12.25) potentially affected by CVE-2026-91129 via homeassistant (2022.12.0b3)

homeassistant PYPI version 2022.12.0b3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.12.0b3 - pytest-homeassistant-custom-component 0.12.25 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2022.12.4), pytest-homeassistant-custom-component (0.12.32) potentially affected by CVE-2026-91129 via homeassistant (2022.12.4)

homeassistant PYPI version 2022.12.4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.12.4 - pytest-homeassistant-custom-component 0.12.32 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2023.2.3), hydroqc2mqtt (>=0.11.2, <=0.11.3) +2 more potentially affected by CVE-2026-91129 via homeassistant (2023.2.3)

homeassistant PYPI version 2023.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.2.3 - hydroqc2mqtt =0.11.2, =0.11.3 - mqtt-hass-base 4.2.0 - pytest-homeassistant-custom-component 0.12.55...

homeassistant-stubs (2022.11.0b1), pytest-homeassistant-custom-component (0.12.12) potentially affected by CVE-2026-91129 via homeassistant (2022.11.0b1)

homeassistant PYPI version 2022.11.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.11.0b1 - pytest-homeassistant-custom-component 0.12.12 Source cves: CVE-2026-91129 Source advisory:...