Malicious code in @dransay/secrets (npm)

Source: amazon-inspector aef0f6b36413e45664391c5341f7c30a4501c2cc916add9ba6525bf57e559d51 The package declares a preinstall script that runs beacon.js, which performs a DNS lookup and HTTPS GET to a hardcoded Interactsh collector host db3klhbi6i9hark1kegg174t38h33b6wt.oast.site at npm install tim...

Malicious code in @dransay/db (npm)

Source: amazon-inspector dc3d55a63787b5f45312d0b8433f6e782b2a6b28e89ef6377e24e5d26c757a61 On npm install, the package's preinstall hook executes beacon.js, which performs a DNS lookup and HTTPS GET to a hardcoded interactsh OAST subdomain under oast.site, embedding the package name in the path. T...

Malicious code in @dransay/logger (npm)

Source: amazon-inspector 5d4cbd17edce3b0c45619c9af869321807357e3dae1af8aa94835d3143185e85 The package @dransay/[email protected] ships a preinstall hook node beacon.js that fires on npm install. The script performs a DNS lookup and HTTPS GET to the interactsh collaborator host...

Malicious code in dransay (npm)

Source: amazon-inspector 46d06d0ce82913346840f676660d67f9838f48511e58eef793bfe7c52091071f [email protected] declares a preinstall lifecycle script that runs node beacon.js, which performs a DNS lookup and HTTPS GET against a hardcoded Interactsh oast.site collaborator subdomain...

4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +4494 more potentially affected by CVE-2026-106446 via handlebars (>=4.0.0, <=4.7.9)

handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =2.7.0, =1.16.0, =1.16.0, =1.16.9 and more Source cves: CVE-2026-106446 Source advisory: OSV:GHSA-8R5X-FM3F-WHWJ...

MAL-2026-17701 Malicious code in @kxafunc/xbails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629c665fbfef767c56d24af935d38312f7aa88d1c71d9dfb8c427192e54add0b package.json aliases the libsignal dependency to npm:@bellaxchuu/libsignal-node@latest — a non-standard publisher pinned to the mutable latest dist-t...

a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +64 more potentially affected by CVE-2026-107287 via pydantic-ai-slim (>=2.0.0b1, <=2.51.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =2.1.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =1.1.0, =2.0.0b1, =0.0.721, =5.1.0, =5.14.1 and more Source cves: CVE-2026-107287 Source advisory: GHSA-V36G-JCW9-X7CW...

agent-utilities (>=0.41.0, <=0.51.0), clai (>=1.77.0, <=1.107.6) +37 more potentially affected by CVE-2026-107287 via pydantic-ai-slim (>=1.77.0, <=1.107.6)

pydantic-ai-slim PYPI version =1.77.0, =0.41.0, =1.77.0, =0.0.445, =1.0.0, =1.1.0, =1.0.25, =0.1.102, =26.1.0, =0.1.1, =0.2.0, =0.2.1 - jupydeep 0.1.6 and more Source cves: CVE-2026-107287 Source advisory: GHSA-V36G-JCW9-X7CW...

@forwardemail/wildduck (>=1.40.10, <=4.0.3), @johnqh/haraka (>=8.0.1, <=8.0.17) +13 more potentially affected by CVE-2026-107300 via msgpack5 (>=6.0.1, <=6.0.2)

msgpack5 NPM version =6.0.1, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =1.0.0, =1.0.0-alpha.1, =5.8.30, =0.0.1, =1.46.1, =1.32.21, =2.60.1, =1.1.0, =1.38.0, =1.1.0, =1.32.21 Source cves: CVE-2026-107300 Source advisory: GHSA-5X5G-H9X8-2FH9...

@forwardemail/wildduck (>=1.40.10, <=4.0.3), @johnqh/haraka (>=8.0.1, <=8.0.17) +13 more potentially affected by CVE-2026-107299 via msgpack5 (>=6.0.1, <=6.0.2)

msgpack5 NPM version =6.0.1, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =1.0.0, =1.0.0-alpha.1, =5.8.30, =0.0.1, =1.46.1, =1.32.21, =2.60.1, =1.1.0, =1.38.0, =1.1.0, =1.32.21 Source cves: CVE-2026-107299 Source advisory: GHSA-26WQ-P25C-J6FV...

@forwardemail/wildduck (>=1.40.10, <=4.0.3), @johnqh/haraka (>=8.0.1, <=8.0.17) +13 more potentially affected by CVE-2026-107298 via msgpack5 (>=6.0.1, <=6.0.2)

msgpack5 NPM version =6.0.1, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =1.0.0, =1.0.0-alpha.1, =5.8.30, =0.0.1, =1.46.1, =1.32.21, =2.60.1, =1.1.0, =1.38.0, =1.1.0, =1.32.21 Source cves: CVE-2026-107298 Source advisory: SNYK:JS-MSGPACK5-20581656...

@forwardemail/wildduck (>=1.40.10, <=4.0.3), @johnqh/haraka (>=8.0.1, <=8.0.17) +13 more potentially affected by CVE-2026-107296 via msgpack5 (>=6.0.1, <=6.0.2)

msgpack5 NPM version =6.0.1, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =1.0.0, =1.0.0-alpha.1, =5.8.30, =0.0.1, =1.46.1, =1.32.21, =2.60.1, =1.1.0, =1.38.0, =1.1.0, =1.32.21 Source cves: CVE-2026-107296 Source advisory: OSV:GHSA-QW35-55VC-RHGJ...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +18 more potentially affected by CVE-2026-107292 via pydantic-ai-slim (>=2.0.0b1, <=2.29.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =1.0.67, =0.1.0, =0.1.0rc0, =0.0.2, =0.1.12, =0.20.0, =1.0.0, =1.0.0, =2.0.0b1, =2.0.0b1, =0.1.0, =2.0.0b1, =2.29.0 and more Source cves: CVE-2026-107292 Source advisory: GHSA-Q2XC-RRXJ-58X9...

ara-cli (>=0.1.14.13, <=0.1.14.14), auto-browse (>=0.0.2, <=0.0.5) +31 more potentially affected by CVE-2026-107292 via pydantic-ai (>=1.34.0, <=1.107.4)

pydantic-ai PYPI version =1.34.0, =0.1.14.13, =0.0.2, =1.34.0, =1.0.0, =1.0.0, =0.1.102, =26.0.0, =0.2.0, =0.1.0, =0.1.71, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2026-107292 Source advisory: OSV:GHSA-Q2XC-RRXJ-58X9...

agent-runtimes (0.0.9), agent-utilities (>=0.41.0, <=0.51.0) +61 more potentially affected by CVE-2026-107295 via pydantic-ai-slim (>=1.34.0, <=1.107.2)

pydantic-ai-slim PYPI version =1.34.0, =0.41.0, =0.1.14.13, =0.0.2, =1.34.0, =0.0.400, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =20260622135108.0.0.dev0 and more Source cves: CVE-2026-107295 Source advisory: GHSA-H4XC-3QFQ-JF93...

ara-cli (>=0.1.14.13, <=0.1.14.14), auto-browse (>=0.0.2, <=0.0.5) +31 more potentially affected by CVE-2026-107295 via pydantic-ai (>=1.34.0, <=1.107.2)

pydantic-ai PYPI version =1.34.0, =0.1.14.13, =0.0.2, =1.34.0, =1.0.0, =1.0.0, =0.1.102, =26.0.0, =0.2.0, =0.1.0, =0.1.71, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2026-107295 Source advisory: GHSA-H4XC-3QFQ-JF93...

ara-cli (>=0.1.14.13, <=0.1.14.14), auto-browse (>=0.0.2, <=0.0.5) +31 more potentially affected by CVE-2026-107295 via pydantic-ai (>=1.34.0, <=1.107.2)

pydantic-ai PYPI version =1.34.0, =0.1.14.13, =0.0.2, =1.34.0, =1.0.0, =1.0.0, =0.1.102, =26.0.0, =0.2.0, =0.1.0, =0.1.71, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2026-107295 Source advisory: SNYK:PYTHON-PYDANTICAI-20574181...

agent-runtimes (0.0.9), agent-utilities (>=0.41.0, <=0.51.0) +61 more potentially affected by CVE-2026-107295 via pydantic-ai-slim (>=1.34.0, <=1.107.2)

pydantic-ai-slim PYPI version =1.34.0, =0.41.0, =0.1.14.13, =0.0.2, =1.34.0, =0.0.400, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =20260622135108.0.0.dev0 and more Source cves: CVE-2026-107295 Source advisory: SNYK:PYTHON-PYDANTICAISLIM-20574180...

ara-cli (>=0.1.14.13, <=0.1.14.14), auto-browse (>=0.0.2, <=0.0.5) +54 more potentially affected by CVE-2026-107293 via pydantic-ai (>=0.3.4, <=1.107.2)

pydantic-ai PYPI version =0.3.4, =0.1.14.13, =0.0.2, =0.3.4, =0.0.174, =1.0.0, =0.9.0, =20250930132735.0.0.dev0, =0.1.102, =2.2.0, =0.6.3, =26.0.0, =26.1.1 and more Source cves: CVE-2026-107293 Source advisory: OSV:GHSA-3GH4-CGHQ-F8V4...

agent-runtimes (0.0.9), agent-utilities (>=0.41.0, <=0.51.0) +87 more potentially affected by CVE-2026-107293 via pydantic-ai-slim (>=0.3.4, <=1.107.2)

pydantic-ai-slim PYPI version =0.3.4, =0.41.0, =0.1.14.13, =0.0.2, =0.3.4, =0.0.174, =1.0.0, =0.1.0, =0.9.0, =1.2.0 - eea-genai-blocks 1.0.0 - eea-genai-core 1.2.0 - eea-genai-summary 1.0.0 and more Source cves: CVE-2026-107293 Source advisory: OSV:GHSA-3GH4-CGHQ-F8V4...