MAL-2026-264 Malicious code in @ux-foundry/palette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd18fdf82036fc2f39aba4198fb081eb4cb5683f9b9308bdb2a0f8539c54275 The package @ux-foundry/palette was found to contain malicious code. Source: ghsa-malware...

MAL-2026-278 Malicious code in comstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fdbf1b29e6524cad706ce8d312446d5869b2fb6614892bf9a350ade6b66d3df The package comstrap was found to contain malicious code. Source: ghsa-malware 9c9cb6396bf07d4b55b2e600f0e19966c1141733ef266c323e5382e75d0e1b76 Any...

MAL-2026-289 Malicious code in js-observability (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec70afb236a90dfd2de166a3fe7626fc3c10526de7dffda8468c0a8eccaf964b The package js-observability was found to contain malicious code. Source: ghsa-malware e73e93c1fefbabe1cd40c1fafdb7cd01b97aae241106ecee4aad599c02756d...

MAL-2026-309 Malicious code in sd-pdc-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed2d91fb4db4325ed4d7b78f02cb681cc3ce2a9b5de740755a4fb868780d75f The package sd-pdc-module-client was found to contain malicious code. Source: ghsa-malware...

MAL-2026-281 Malicious code in eniram-web-common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0fed7ec2d24f837bd31fd9768a9727452b9bf8ed355a7073f055fb4fba075c8 The package eniram-web-common-ui was found to contain malicious code. Source: ghsa-malware...

MAL-2026-270 Malicious code in base-ui-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02dfd5d7f28a3a6c1911e9b745f0114967cd677bea80bbfc7c490e6bf1f09ddf The package base-ui-vue3 was found to contain malicious code. Source: ghsa-malware 88f9d0f6ba47ed2a8d641427839b31d3b2debfea9d13f32125734f392a0838d9 A...

MAL-2026-294 Malicious code in lusha-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c1c6b65695a715c9538b69f7230b4c9f89fef68de10ad9b6e2b625f2b22f62 The package lusha-ui-components was found to contain malicious code. Source: ghsa-malware...

MCPJam Inspector security vulnerabilities

MCPJam Inspector is an open-source debugging and quality analysis tool for the Model Context Protocol developed by MCPJam. Versions of MCPJam Inspector 1.4.2 and earlier contain security vulnerabilities. These vulnerabilities stem from specially crafted HTTP requests that can trigger the...

PT-2026-3321

Name of the Vulnerable Software and Affected Versions MCPJam inspector versions prior to 1.4.3 Description MCPJam inspector is a local-first development platform for MCP servers. The software is susceptible to remote code execution RCE because it binds to 0.0.0.0 by default instead of 127.0.0.1,...

Astra Linux – Vulnerability in WebKit2GTK

A flaw was discovered in WebKitGTK and WPE WebKit. This vulnerability allows for an out-of-bounds read and integer underflow, resulting in a UIProcess crash DoS through a crafted payload sent to the GLib remote inspector server...

[SECURITY] Fedora 43 Update: seamonkey-2.53.23-1.fc43

SeaMonkey is an all-in-one Internet application suite previously made popular by Netscape and Mozilla. It includes an Internet browser, advanced e-mail, newsgroup and feed client, a calendar, IRC client, HTML editor and a tool to inspect the DOM for web pages. It is derived from the application...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds read and an integer underflow bsc1254208...

SUSE-SU-2026:0021-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: - CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds read and an integer underflow bsc1254208....

Important: webkitgtk4

Issue Overview: A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash DoS via a crafted payload to the GLib remote inspector server. CVE-2025-13502 A flaw was found in WebKitGTK. This vulnerability allows...

Malicious code in tickncook-robot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca37d83d19175da5b3240e35b77605369a59fac393b51117458e1d852e2c86f5 The package tickncook-robot was found to contain malicious code. Source: ghsa-malware 69891529072c56796517d40db82d60db1d56f7a70c03567b4b9d7341d9125f9...

Malicious code in kid-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc35802113ea5c7ac4e3d956e72af4ce3fbc5a9b3b8fc4c9d610d158d65250a The package kid-api was found to contain malicious code...

Malicious code in initializers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa9db2df654753e6f6ebb5f77fd9607441b642e1da3306fbf8a1909fb41c179 The package initializers was found to contain malicious code. Source: ghsa-malware e0374b8e7835a603949d751a91405b851c622bd8536d96cf80a9b092fca15c35 A...

Malicious code in fix-cc-raiesy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17aa6cbdc4986ee5b3aa8c4ea5e5a4dc3ddfc9f7d266bdde5f9d81445551cb73 The package fix-cc-raiesy was found to contain malicious code. Source: ghsa-malware 8e5d10de64ca997908f8b7ba463f0bc41b2553f4d883ab13b6e9f7a4fa5d387e...

Malicious code in cc-double-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70cef7c9872833a60083bf6c209e3c0820db61d4350689db8b2480b58026874 The package cc-double-1 was found to contain malicious code...

Malicious code in 511fola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb9d65067967eb3823731d9beecb461b0746c872d8ba438280cbfa55e572eb2 The package 511fola was found to contain malicious code...