@forwardemail/wildduck (>=1.40.10, <=4.0.3), @johnqh/haraka (>=8.0.1, <=8.0.17) +13 more potentially affected by CVE-2026-107301 via msgpack5 (>=6.0.1, <=6.0.2)

msgpack5 NPM version =6.0.1, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =1.0.0, =1.0.0-alpha.1, =5.8.30, =0.0.1, =1.46.1, =1.32.21, =2.60.1, =1.1.0, =1.38.0, =1.1.0, =1.32.21 Source cves: CVE-2026-107301 Source advisory: MEND:CVE-2026-107301...

agent-runtimes (0.0.9), agent-utilities (>=0.41.0, <=0.51.0) +61 more potentially affected by CVE-2026-107295 via pydantic-ai-slim (>=1.34.0, <=1.107.2)

pydantic-ai-slim PYPI version =1.34.0, =0.41.0, =0.1.14.13, =0.0.2, =1.34.0, =0.0.400, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =20260622135108.0.0.dev0 and more Source cves: CVE-2026-107295 Source advisory: MEND:CVE-2026-107295...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +15 more potentially affected by CVE-2026-107294 via pydantic-ai-slim (>=2.0.0b1, <=2.23.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =1.0.67, =0.1.0rc0, =0.20.0, =1.0.0, =1.0.0, =2.0.0b1, =2.0.0b1, =0.1.0, =2.0.0b1, =1.0.1, =0.26.0, =0.1.2, =0.2.2 and more Source cves: CVE-2026-107294 Source advisory: MEND:CVE-2026-107294...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +16 more potentially affected by CVE-2026-107293 via pydantic-ai-slim (>=2.0.0b1, <=2.27.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =1.0.67, =0.1.0rc0, =0.0.2, =0.20.0, =1.0.0, =1.0.0, =2.0.0b1, =2.0.0b1, =0.1.0, =2.0.0b1, =1.0.1, =0.26.0, =0.35.0 and more Source cves: CVE-2026-107293 Source advisory: MEND:CVE-2026-107293...

acpkit (>=1.5.0, <=1.9.0), akgentic-llm (>=2.1.0, <=2.2.0) +26 more potentially affected by CVE-2026-107290 via pydantic-ai (>=2.0.0b1, <=2.43.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =2.1.0, =0.1.9.62, =0.2.1, =1.1.0, =2.0.0b1, =5.1.0, =0.1.8, =0.1.0, =0.1.0, =0.1.0, =1.2.3 - isek 0.3.0 - kubeagent-cli 1.0.0 and more Source cves: CVE-2026-107290 Source advisory: GHSA-FPF4-VWCP-V4HP...

agent-runtimes (0.0.9), agent-utilities (>=0.41.0, <=0.51.0) +88 more potentially affected by CVE-2026-107291 via pydantic-ai-slim (>=0.3.4, <=1.107.5)

pydantic-ai-slim PYPI version =0.3.4, =0.41.0, =0.1.14.13, =0.0.2, =0.3.4, =0.0.174, =1.0.0, =0.1.0, =0.9.0, =1.2.0 - eea-genai-blocks 1.0.0 - eea-genai-core 1.2.0 - eea-genai-summary 1.0.0 and more Source cves: CVE-2026-107291 Source advisory: SNYK:PYTHON-PYDANTICAISLIM-20583782...

agent-runtimes (0.0.9), agent-utilities (>=0.41.0, <=0.51.0) +61 more potentially affected by CVE-2026-107292 via pydantic-ai-slim (>=1.34.0, <=1.107.4)

pydantic-ai-slim PYPI version =1.34.0, =0.41.0, =0.1.14.13, =0.0.2, =1.34.0, =0.0.400, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =20260622135108.0.0.dev0 and more Source cves: CVE-2026-107292 Source advisory: MEND:CVE-2026-107292...

acpkit (>=1.5.0, <=1.9.0), akgentic-llm (>=2.1.0, <=2.2.0) +26 more potentially affected by CVE-2026-107291 via pydantic-ai (>=2.0.0b1, <=2.43.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =2.1.0, =0.1.9.62, =0.2.1, =1.1.0, =2.0.0b1, =5.1.0, =0.1.8, =0.1.0, =0.1.0, =0.1.0, =1.2.3 - isek 0.3.0 - kubeagent-cli 1.0.0 and more Source cves: CVE-2026-107291 Source advisory: MEND:CVE-2026-107291...

MAL-2026-17689 Malicious code in @galicia-toolkit/error-master (npm)

@galicia-toolkit/[email protected] claims the @galicia-toolkit scope and describes itself as a dependency-confusion PoC. Its postinstall hook runs on npm install using node postinstall.js || true and sends encoded hostname, working-directory, platform, runtime-version, and username data as DNS...

MAL-2026-17691 Malicious code in @galicia-toolkit/tag-manager (npm)

@galicia-toolkit/tag-manager claims the @galicia-toolkit scope and describes itself as a dependency-confusion PoC. Its postinstall hook runs node postinstall.js || true on npm install; the script collects host, platform, runtime, network, and environment data, then sends it over HTTP to...

MAL-2026-17690 Malicious code in @galicia-toolkit/spa-build-config (npm)

@galicia-toolkit/[email protected] and @galicia-toolkit/[email protected] claim the @galicia-toolkit scope and describe themselves as dependency-confusion PoCs. Their postinstall hook runs on npm install with node postinstall.js || true. The script collects package and host...

SUSE-SU-2026:4589-1 Security update for php-composer2

This update for php-composer2 fixes the following issues: - CVE-2026-59946: package bin entries with path segments can cause unintended host file permission modifications bsc1271152. - CVE-2026-59947: unsanitized URL credential handling in debug output within Composer can allow sensitive token...

Malicious code in @dransay/logger (npm)

@dransay/[email protected] is a dependency-confusion probe claiming the internal @dransay/ namespace, not an identified public package. Its preinstall hook runs on npm install as node beacon.js and sends a DNS lookup and an HTTPS GET to db3klhbi6i9hark1kegg174t38h33b6wt.oast.site, using the package...

MAL-2026-17697 Malicious code in @dransay/logger (npm)

@dransay/[email protected] is a dependency-confusion probe claiming the internal @dransay/ namespace, not an identified public package. Its preinstall hook runs on npm install as node beacon.js and sends a DNS lookup and an HTTPS GET to db3klhbi6i9hark1kegg174t38h33b6wt.oast.site, using the package...

Malicious code in @dransay/api (npm)

@dransay/[email protected] is a dependency-confusion probe claiming the internal @dransay/ namespace, not an identified public package. Its preinstall hook runs on npm install as node beacon.js and sends a DNS lookup and an HTTPS GET to db3klhbi6i9hark1kegg174t38h33b6wt.oast.site, using the package name...

MAL-2026-17805 Malicious code in @dransay/api (npm)

@dransay/[email protected] is a dependency-confusion probe claiming the internal @dransay/ namespace, not an identified public package. Its preinstall hook runs on npm install as node beacon.js and sends a DNS lookup and an HTTPS GET to db3klhbi6i9hark1kegg174t38h33b6wt.oast.site, using the package name...

Malicious code in @dransay/secrets (npm)

@dransay/[email protected] is a dependency-confusion probe claiming the internal @dransay/ namespace, not an identified public package. Its preinstall hook runs on npm install as node beacon.js and sends a DNS lookup and an HTTPS GET to db3klhbi6i9hark1kegg174t38h33b6wt.oast.site, using the package...

MAL-2026-17699 Malicious code in @dransay/secrets (npm)

@dransay/[email protected] is a dependency-confusion probe claiming the internal @dransay/ namespace, not an identified public package. Its preinstall hook runs on npm install as node beacon.js and sends a DNS lookup and an HTTPS GET to db3klhbi6i9hark1kegg174t38h33b6wt.oast.site, using the package...

Malicious code in css-flow-render-shim (npm)

Source: amazon-inspector f008c8756b09bb1840b05eafe5a30432475f6cc2d5a10064a42920059e8784fd The package publishes an empty index.js stub but ships Thunderbolt manifests that register payload.bundle.min.js as the bundle for core Wix components across the thunderbolt/wixui and thunderbolt/dsgnsys...

Malicious Package

Overview abbishal-poc-as-dependency is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...