CVE-2026-124944

Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160 and Thunderbird 160...

EUVD-2026-120939

Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160 and Thunderbird 160...

CVE-2026-124944

An information disclosure vulnerability exists in the Marionette component of the Firefox web browser. This security flaw was addressed and fixed in Firefox 160 . No specific root cause, exploit details, or other technical specifics are provided in the available documentation.

CVE-2026-124944 Information disclosure in the Marionette component

Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160 and Thunderbird 160...

CVE-2026-124944: Mozilla Firefox: Information disclosure in the Marionette component

Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160...

PT-2026-141708

Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160...

Malicious Package

Overview @tw-marionette/clipboard is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malware in @tw-marionette/clipboard

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @tw-marionette/input

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-3070 Malicious code in @tw-marionette/clipboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9309f16e4a8a15191279d206290e2ab8f8dfa9daeae0df7b92c09bc9a1d726e4 The package @tw-marionette/clipboard was found to contain malicious code. Source: ghsa-malware...

Malicious code in @tw-marionette/clipboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9309f16e4a8a15191279d206290e2ab8f8dfa9daeae0df7b92c09bc9a1d726e4 The package @tw-marionette/clipboard was found to contain malicious code. Source: ghsa-malware...

Malicious code in @tw-marionette/input (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b93bf39d5351c220722a3326600c9855309a8e76cb6e10b8cff20f0d9bb102 The package @tw-marionette/input was found to contain malicious code. Source: ghsa-malware...

MAL-2026-3071 Malicious code in @tw-marionette/input (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b93bf39d5351c220722a3326600c9855309a8e76cb6e10b8cff20f0d9bb102 The package @tw-marionette/input was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview marionette-react-view is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in marionette-react-view

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in gaia-marionette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81308c35c4cad5bf3f87f791133f9aff53485b715060135829785be1d33b2e1d The package gaia-marionette was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-1227 Malicious code in gaia-marionette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81308c35c4cad5bf3f87f791133f9aff53485b715060135829785be1d33b2e1d The package gaia-marionette was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in marionette-react-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf2cb3282bede4d5ddc03ed4c435fefa92ad5b6b18f51f7d7980578ec3bcf60 The package marionette-react-view was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1081 Malicious code in marionette-react-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf2cb3282bede4d5ddc03ed4c435fefa92ad5b6b18f51f7d7980578ec3bcf60 The package marionette-react-view was found to contain malicious code. Source: ghsa-malware...

Malicious code in marionette-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4962667c8dd0da2bbc76d598b0820a7371844141b721e7d346913fae8581c733 The OpenSSF Package Analysis project identified 'marionette-ui-components' @ 6.9.2 npm as malicious. It is considered malicious because: - The...