195063 matches found
MAL-2026-13766 Malicious code in node-internal-svg-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea179fb3670844db867458418a68b3eb69dfd983ebe1fe96b2a4b41601266fc4 Package advertises itself as an SVG loader using well-known CDN providers, but exported functions getPlugin, setPlugin, and getPluginExten build a...
MAL-2026-13762 Malicious code in developer-dashboard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde7491a839ea8dc199215ce4c506b89ec0d9a9b1cded593b063a5b9b7015509 The package presents itself as a 'developer dashboard' but ships a heavily obfuscated single-file payload obfuscator.io-style 0xXXXX identifiers with...
Malicious code in developer-dashboard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde7491a839ea8dc199215ce4c506b89ec0d9a9b1cded593b063a5b9b7015509 The package presents itself as a 'developer dashboard' but ships a heavily obfuscated single-file payload obfuscator.io-style 0xXXXX identifiers with...
ROOT-APP-NPM-CVE-2026-53669 CVE-2026-53669 in react-router - Patched by Root
Root has patched CVE-2026-53669 in the react-router package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-55685 CVE-2026-55685 in react-router - Patched by Root
Root has patched CVE-2026-55685 in the react-router package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-53667 CVE-2026-53667 in react-router - Patched by Root
Root has patched CVE-2026-53667 in the react-router package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-53666 CVE-2026-53666 in react-router - Patched by Root
Root has patched CVE-2026-53666 in the react-router package for Root:npm. Multiple fixed versions available...
Malicious code in ghazaly (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2054792481618ddf941c251fc0793ec8c1b85fe14107567b5c29cac9330d5be package.json declares a postinstall hook that executes index.js on npm install. index.js requires os, https, and childprocess, runs whoami via...
Malicious code in dependencyfsdsfdsfg (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53ad8755f0eb26cef8c05b49cdad8c69b93072e0d9ed176b071a7d367349cab package.json declares postinstall: node index.js, causing index.js to run automatically on npm install. The script collects the installer's username...
MAL-2026-13755 Malicious code in ghazaly (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2054792481618ddf941c251fc0793ec8c1b85fe14107567b5c29cac9330d5be package.json declares a postinstall hook that executes index.js on npm install. index.js requires os, https, and childprocess, runs whoami via...
MAL-2026-13754 Malicious code in dependencyfsdsfdsfg (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53ad8755f0eb26cef8c05b49cdad8c69b93072e0d9ed176b071a7d367349cab package.json declares postinstall: node index.js, causing index.js to run automatically on npm install. The script collects the installer's username...
Malicious code in fetch-runtime (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab5c49646ea7e22e74073aa7d8c9596d7d93100c429033383e975a2ab080de28 Package name is 'fetch-runtime' but the source is a copy of npm's 'make-fetch-happen' repository, README, and author metadata all reference...
MAL-2026-13763 Malicious code in fetch-runtime (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab5c49646ea7e22e74073aa7d8c9596d7d93100c429033383e975a2ab080de28 Package name is 'fetch-runtime' but the source is a copy of npm's 'make-fetch-happen' repository, README, and author metadata all reference...
MAL-2026-13765 Malicious code in lines-columns (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c9abe51d09dfaa6a2e38e60df64038009c1029b34587cc2c8906d37642187cd Package name 'lines-columns' closely resembles the popular 'lines-and-columns' package, and the README instructs users to install 'lines-and-columns'...
Malicious code in lines-columns (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c9abe51d09dfaa6a2e38e60df64038009c1029b34587cc2c8906d37642187cd Package name 'lines-columns' closely resembles the popular 'lines-and-columns' package, and the README instructs users to install 'lines-and-columns'...
RHSA-2026:53298 Red Hat Security Advisory: nodejs22 security update
Bulletin has no description...
RHSA-2026:52841 Red Hat Security Advisory: nodejs-nodemon security update
Bulletin has no description...
GHSA-7GMJ-H9XC-MCXC
creationtimestamp| type| source ---|---|--- 2026-08-11 09:43:37+00:00| seen| https://gist.github.com/hayageek/05ef86a8272d03ab9e54ab5476cf7afe...