297 matches found
3h1-ui (>=1.0.46, <=3.0.0-next.266), 3t-ui (>=0.0.7, <=0.0.9) +2407 more potentially affected by CVE-2026-118256 via vue-i18n (>=9.0.0-beta.8, <=11.4.13)
vue-i18n NPM version =9.0.0-beta.8, =1.0.46, =0.0.7, =0.5.0, =0.0.0, =0.0.0, =0.1.9, =0.0.292, =0.0.292, =0.0.237, =2.0.0-dev.838f140, =3.0.1, =0.1.0, =0.15.0, =1.1.5 and more Source cves: CVE-2026-118256 Source advisory: OSV:GHSA-8RC2-428Q-7WW3...
3h1-ui (>=1.0.46, <=3.0.0-next.266), 3t-ui (>=0.0.7, <=0.0.9) +1886 more potentially affected by CVE-2026-118257 via @intlify/shared (9.14.5)
@intlify/shared NPM version 9.14.5 is affected by a known vulnerability. The following packages have a transitive dependency on @intlify/shared and may be impacted: - 3h1-ui =1.0.46, =0.0.7, =0.5.0, =0.0.0, =0.0.0, =0.1.9, =0.0.292, =0.0.292, =0.0.237, =0.0.11, =2.0.0-dev.838f140, =3.0.1, =0.1.0,...
3h1-ui (>=1.0.46, <=3.0.0-next.266), 3t-ui (>=0.0.7, <=0.0.9) +2407 more potentially affected by CVE-2026-118256 via vue-i18n (>=9.0.0-beta.8, <=11.4.13)
vue-i18n NPM version =9.0.0-beta.8, =1.0.46, =0.0.7, =0.5.0, =0.0.0, =0.0.0, =0.1.9, =0.0.292, =0.0.292, =0.0.237, =2.0.0-dev.838f140, =3.0.1, =0.1.0, =0.15.0, =1.1.5 and more Source cves: CVE-2026-118256 Source advisory: MEND:CVE-2026-118256...
Malware in @design-system-coopeuch/web
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @zig-design-system/react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1247992d3c2b02f93cea726189a4ff0a25eef9535b2a34eb7a120f8c9496f67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in @zig-design-system/react
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2026-16372 Malicious code in @zig-design-system/react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1247992d3c2b02f93cea726189a4ff0a25eef9535b2a34eb7a120f8c9496f67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview @zig-design-system/react is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in healthbridge-design-system (npm)
Source: ossf-package-analysis 8a45a21805510c3390a5789a690b22ba697abed37486f11b580a61895f01ab42 The OpenSSF Package Analysis project identified 'healthbridge-design-system' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...
Malicious code in hearsay-design-system (npm)
--- Credit: OpenSSF source...
Malicious code in design-system-cmp (npm)
The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...
Malicious code in design-system-components-angular-workspace (npm)
The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...
Malicious code in components-design-system (npm)
Source: amazon-inspector ca129c441caef97d904867f91617f53799650e2f2deef3f531a3a18dfc917efa The package components-design-system was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in altoqitec-design-system-react (npm)
The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...
MAL-2026-14002 Malicious code in index-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46741db74596587c4d689ad282865566173c18913e95bacac258d20ac71da8cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in index-design-system
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in index-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46741db74596587c4d689ad282865566173c18913e95bacac258d20ac71da8cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview index-design-system is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in @united-airlines-org/atmos-design-system (npm)
The package @united-airlines-org/atmos-design-system contains a malicious preinstall script in its package.json that runs automatically during installation. The script executes curl to send the machine's hostname, obtained via uname -n and base64-encoded, to the attacker-controlled endpoint...
Malicious code in @united-airlines-org/atmos-design-system (npm)
The package @united-airlines-org/atmos-design-system contains a malicious preinstall script in its package.json that runs automatically during installation. The script executes curl to send the machine's hostname, obtained via uname -n and base64-encoded, to the attacker-controlled endpoint...