MAL-2026-15600 Malicious code in @lucideproxy/svg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c00e810f5961798d82a45678ccddfa58f15503ed24c6cad677a6ee854d86d7fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackhr3ocw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7f5462a6cad4608977cbf01ae1fab24a1257afe36d254ce404ca49b5aab99c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14852 Malicious code in 3layerdipstacko8li9w (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9886025a6437b781a80821d6f113c08dea138ee45899438c19bf9e7cf3e366c5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14720 Malicious code in 3layerdipstackd8ze8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c061d4cc1b61f20a61084a2c81b899987a5bfb31033147c9de24ec914e8c509b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14896 Malicious code in 3layerdipstackqyhks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5322e6b69eac64014019142e56eb5fdb2c001839ca49a66df4b4eb31cdeb278a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14808 Malicious code in 3layerdipstackkysrek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d1f569a2e645d005f3e8dd8f757dfa4b26f11d80dbea28773cf8528c0501af The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15213 Malicious code in desmos-graphing-czo3yc51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b285c75e0a8a33666d0b4d0cef5565d35a743bc56fca4f77e5b1c5644b74795 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in classlink-rlofqkrd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ef3a1efcc8611a80609f44d8521de2538786d11df244e3623a227492d5dabf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in classlink-r6iheodx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32e3dc487997e79dea8c2af926b9b46a8077d4e700e9265f0e1b8b850e6bef56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15162 Malicious code in classlink-vvp2o5z5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff07fc1bddd87321388e37f85bebbdce199fafe0c86ef30529e203db9fb48f90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15343 Malicious code in secure-test-browser-fmbp7grs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b32906cd1ade3459db84948bdf7e7dd0923b56faa35cc21d723d54bc5b15fa5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15108 Malicious code in classlink-lflju095 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8fed0f7dc2498282064addc438125bd85b8c2560d4fc0f1ba66b3e930d73a67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-7v1llls8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a5e3795c80298db24f1ab3e6e116f10013548b513aa68f6d1c69ead36434b02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15433 Malicious code in secure-test-browser-tvzkbkqw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a94e2b675468637b758c5a82bc80cae49e525bfc1aab2cc7e94d1c299e197d89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in svelte-streak-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b054f1d8e8f496e3bdabacf1bf5042b2aba5f9587646cbb874ae9e3ec9c7c7f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-41451

UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parseartifact.sh where usernames and home directories from /etc/passwd are substituted directly into command strings without escaping before execution via eval...

CVE-2026-17494

IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system,...

CVE-2026-16930

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can execute arbitrary code on the host system,...

CVE-2026-17429 Power System Incorrect Authorization

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with...

CVE-2026-16930

Power Systems Firmware versions FW1120.00, FW1110.00–.30, and FW1060.00–.80 are affected by CWE-862 (Missing Authorization), allowing a privileged BMC/FSP user to execute arbitrary code on the host and all partitions. Upgrade to FW1110.31, FW1120.01, or FW1060.81 (or newer) per the IBM Security B...