@11ty/eleventy (=3.0.0-alpha.16), @agiflowai/aicode-toolkit (>=0.6.0 <=1.1.0) +95 more potentially affected by CVE-2026-44646 via liquidjs (>=10.10.0 <=10.25.7)

liquidjs NPM version =10.10.0, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.8.0, =1.0.1, =1.6.3, =3.11.0, =3.11.0, =3.11.0, =1.0.0, =1.0.0-beta.5 - @clairview/api =23.1.0 and more Source cves: CVE-2026-44646 Source advisory: OSV:GHSA-9X9P-QF8F-MVJG...

Malicious code in xerxes-auth-jekyll-ionosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ad4f9df284c5088fa33be03291602f134c74a08bde68bd1d24c3220134e5cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175650

Malicious code in warp-ora-duplex-jekyll npm...

EUVD-2025-175534

Malicious code in winston-writable-betelgeuse-jekyll npm...

EUVD-2025-178281

Malicious code in jekyll-deneb-uglify-js-paleobotany npm...

EUVD-2025-175715

Malicious code in virgo-terser-webpack-plugin-resonance-jekyll npm...

EUVD-2025-178520

Malicious code in hologram-jekyll-radiometric-bellatrix npm...

EUVD-2025-175493

Malicious code in xerxes-auth-jekyll-ionosphere npm...

EUVD-2025-175455

Malicious code in yaml-barnard-jekyll-magnetar npm...

EUVD-2025-177343

Malicious code in paleontology-tailwindcss-tethys-jekyll npm...

EUVD-2025-178279

Malicious code in jekyll-nightmare-juno-eclipse npm...

EUVD-2025-179066

Malicious code in eris-jekyll-cryovolcano-charon npm...

EUVD-2025-177919

Malicious code in mechatronics-quantum-jekyll-jabbah npm...

MAL-2025-187345 Malicious code in hermes-jekyll-io-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cebbffea7d927de23aca7aba4078e9cd9b853bf3771183fa290a72232a56eb7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178537

Malicious code in hermes-jekyll-io-nightwatch npm...

EUVD-2025-176052

Malicious code in taurus-bootes-jekyll-neptune npm...

EUVD-2025-178300

Malicious code in janus-repository-acamar-jekyll npm...

EUVD-2025-179906

Malicious code in callback-jekyll-public-nebula npm...

EUVD-2025-178280

Malicious code in jekyll-less-npm-local npm...

EUVD-2025-179972

Malicious code in brane-pm2-isostasy-jekyll npm...