MAL-2026-16040 Malicious code in wallet-cds-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90a2fd556bde6edbeed9d4c1ebd8dcf4b1c24a5dfda8d70d6cb91cfc7ee3fa2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in b2b-frontend-external-library (npm)

This package is malicious. It is not a real library. An attacker put it on the public npm registry. The package name is a copy of a private, internal package name. This is a dependency confusion attack. A build that gets the name from public npm installs this package in place of the real one. The...

MAL-2026-16009 Malicious code in omni-channel-configurator-wireline-frontend (npm)

This package is malicious. It is not a real library. An attacker put it on the public npm registry. The package name is a copy of a private, internal package name. This is a dependency confusion attack. A build that gets the name from public npm installs this package in place of the real one. The...

MAL-2026-16007 Malicious code in @caliperx2/components (npm)

This package is malicious. It is not a real library. An attacker put it on the public npm registry. The package name is a copy of a private, internal package name. This is a dependency confusion attack. A build that gets the name from public npm installs this package in place of the real one. The...

Malicious Package

Overview eceqoq is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Embedded Malicious Code

Overview bmc-translate-utils is a 翻译工具函数，支持有道，谷歌，百度，阿里机器、openAI翻译 Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple packages maintained by ham1912. A malicious actor published tampered version...

Embedded Malicious Code

Overview blueai-cli is a BlueAI atomic capabilities CLI Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple packages maintained by ham1912. A malicious actor published tampered versions to the n...

Malicious code in oce-configurator-wireless-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191e4a78bf46781b56b290aac7b804fd9470b1ac189896b950afbaba548183e6 Package name resembles an internal Swisscom OCE package and is published at version 9999.0.0 to win resolution against a private registry. The...

MAL-2026-15940 Malicious code in oce-configurator-wireless-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191e4a78bf46781b56b290aac7b804fd9470b1ac189896b950afbaba548183e6 Package name resembles an internal Swisscom OCE package and is published at version 9999.0.0 to win resolution against a private registry. The...

MAL-2026-15942 Malicious code in omni-channel-order-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5286224ab4427b1e85bbdfd5e57b9d96fc9736504d17f2f31839562f19b88ee The package name and 9999.0.0 version are consistent with a dependency-confusion lure targeting an internal omni-channel-order-frontend package...

MAL-2026-15939 Malicious code in omni-channel-oid-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8c0fe84f28408bb01adee4ff47b26ed354143c53975559c5d5f2b0a06a61ce omni-channel-oid-frontend ships a preinstall.js lifecycle script that fires automatically on npm install. The script collects os.hostname,...

Malicious code in vishal_312pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d38dada8ec3921b4a3f69e7d44b5f5b54d345ff8f9581d34007a3e68679da4 package.json declares a preinstall lifecycle script that runs on npm install and issues a wget request to...

CVE-2026-86253

h3 npm package versions = 2.0.1-rc.14 contain a path traversal vulnerability in serveStatic. On Node.js deployments, event.url.pathname is not normalized, so percent-encoded dot segments %2e%2e are passed to decodeURI and decoded to ../ sequences without sanitization. An unauthenticated remote...

EUVD-2026-72109

h3 npm package versions = 2.0.1-rc.14 contain a path traversal vulnerability in serveStatic. On Node.js deployments, event.url.pathname is not normalized, so percent-encoded dot segments %2e%2e are passed to decodeURI and decoded to ../ sequences without sanitization. An unauthenticated remote...

CVE-2026-86253 h3 before 1.15.6 Path Traversal via Percent-Encoded Dot Segments

h3 npm package versions = 2.0.1-rc.14 contain a path traversal vulnerability in serveStatic. On Node.js deployments, event.url.pathname is not normalized, so percent-encoded dot segments %2e%2e are passed to decodeURI and decoded to ../ sequences without sanitization. An unauthenticated remote...

Malicious code in @liuliang520500/sinataoke_cn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e3ff1d04feca3fcec866427a6d90307e3391fde1e732c8f600a06e86900af5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @liuliang520500/sinataoke_cn_test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3049eff160660fee9030ad57663083c1171a4e69c84b4f234660420d124c5c82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15960 Malicious code in @liuliang520500/sinataoke_cn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e3ff1d04feca3fcec866427a6d90307e3391fde1e732c8f600a06e86900af5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15961 Malicious code in @liuliang520500/sinataoke_cn_test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3049eff160660fee9030ad57663083c1171a4e69c84b4f234660420d124c5c82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @liuliang520500/jd-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b68e3cfe0548d1118ec047bea15f3bb902fcb9db0816251df440e2e2326a5382 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...