Malicious code in upstartportal (npm)

Collects system info, reads sensitive files, and exfiltrates data to a suspicious host. Multiple YARA matches confirm malicious intent. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932dee0dcf84fc1044efb1ec35950d6102fcbb5122f26cca5e2b1f13eb599729 The package...

MAL-2026-2620 Malicious code in upstartportal (npm)

Collects system info, reads sensitive files, and exfiltrates data to a suspicious host. Multiple YARA matches confirm malicious intent. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932dee0dcf84fc1044efb1ec35950d6102fcbb5122f26cca5e2b1f13eb599729 The package...

Malicious code in upstartloans (npm)

Collects and exfiltrates sensitive data credentials, keys, history to p1s.uk with disabled SSL validation. Suspicious postinstall script. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1d5c610e0cc5ec6be53b8d0d986d5ddef30937d04c977998db4c2d4b0be908 The package...

MAL-2026-2611 Malicious code in upstart-lending-status (npm)

Package is malware. It steals credentials, collects system info, and exfiltrates data to a remote server via postinstall script. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627a2802a53ad7eb751fcac4b0a43245c6b0bf9e667db77051758b24d8bc4d96 The package...

MAL-2026-2564 Malicious code in gp-auth-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a24cae80696867d7d7b835ee70e1ef1e85373092f31cd93e2a35508ae3d2afb3 The package gp-auth-lib was found to contain malicious code. Source: ghsa-malware 73c001ebe2675cd78ef852bc2e78ff6fb837fd64b9b490dbea61c4ff1ca6d146 An...

Malicious code in ts-schema-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa35c0f1b632f24027499340dfbe35df1f1d57bed2a5ad8327d688a7b23507a3 The package ts-schema-helpers was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2876 Malicious code in unisys-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0369680ea400c89b8ab01dfc75f7a7df45c8a26bfc5631a636770ccf32c9ed The package unisys-common was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2875 Malicious code in unisys-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89bc257f69dca8cec54b15b47533c97f9b6b47f16aae5f2dc868ff7faaf0c93b The package unisys-auth was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2869 Malicious code in arlo-meeting-assistant-rtms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5f17c482aef8ac270cf630fe452dacc79acbeb0b473ffd0ac640769e1a0fb6 The package arlo-meeting-assistant-rtms was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in arlo-meeting-assistant-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842ae675e3d076ecc89e2697ee378f503945bae268487584277cd92a93ec44fe The package arlo-meeting-assistant-backend was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2872 Malicious code in ts-form-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f2ff1bf87164fdeb2ca9c37d578f7156164a344ffd11bcdb84ce34880358fea The package ts-form-helpers was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in paysafe-venmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fce8d34aa19e18a627c71bd9fd4d16246319ca05abafd983708a534663a573f The package paysafe-venmo was found to contain malicious code. Source: ghsa-malware 678a8d684fa9e6f72f98c45d404c3e749491bd582d4b78ddc4bc3d020ae3c172...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, dbmate, aws-load-balancer-controller, temporal, victoriametrics, karpenter, grafana-rollout-operator, tailscale, omnibump, osv-scanner, flux-image-reflector-controller, go, volume-modifier-for-k8s, envoy-ratelimit, github-mcp-server,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: azure-service-operator, aws-load-balancer-controller, aws-flb-firehose, nri-prometheus, kubescape, trivy, ko, metrics-agent, rancher-machine, mockery, stakater-reloader, kube-arangodb, kube-fluentd-operator, contour, docker-cli-buildx, witness, cert-manager,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: azure-service-operator, dbmate, aws-flb-firehose, cloud-provider-vsphere, delve, terraform-docs, kubeflow-katib, migrate, go-discover, coredns, kubescape, external-dns, osv-scanner, tetragon, trivy, prometheus-pushgateway, kubernetes-csi-external-attacher,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: azure-service-operator, dbmate, aws-flb-firehose, cloud-provider-vsphere, delve, terraform-docs, kubeflow-katib, migrate, go-discover, coredns, kubescape, external-dns, osv-scanner, tetragon, trivy, prometheus-pushgateway, kubernetes-csi-external-attacher,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: azure-service-operator, aws-load-balancer-controller, aws-flb-firehose, nri-prometheus, kubescape, trivy, ko, metrics-agent, rancher-machine, mockery, stakater-reloader, kube-arangodb, kube-fluentd-operator, contour, docker-cli-buildx, witness, cert-manager,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: external-dns-fips, argo-cd-fips, knative-kafka-broker, cloud-provider-aws-fips, tempo, fleet-server, grafana-mimir, tempo-fips, onepassword-operator, xeol-fips, fuse-overlayfs-snapshotter, zot, gitlab-rails-ce-fips, gitlab-operator, virt-controller-fips, kepler,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: external-dns-fips, argo-cd-fips, knative-kafka-broker, kubeflow, kubescape-http-request-fips, nri-nginx-fips, cloud-provider-aws-fips, tempo, fleet-server, grafana-mimir, tempo-fips, onepassword-operator, xeol-fips, fuse-overlayfs-snapshotter, zot,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: external-dns-fips, argo-cd-fips, knative-kafka-broker, kubescape-http-request-fips, nri-nginx-fips, cloud-provider-aws-fips, xeol-fips, onepassword-operator, gitlab-rails-ce-fips, prometheus-beat-exporter, nfs-subdir-external-provisioner, aws-node-termination-handler...