CVE-2026-10053-lab

CVE-2026-10053 — laboratorio de verificación reproducible Laboratorio autónomo que demuestra el path traversal del registro de paquetes npm de GitLab CVE-2026-10053 y muestra que está corregido, usando un oráculo determinista en disco — no el estado HTTP. Qué se demuestra y qué no. Este laborator...

Malicious code in sql-limit-enforcer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8126bab8131e5781af023537f7c5fc2456929c104f71312eeddcea358b5659 Package ships no legitimate functionality: package.json declares main=index.js which is absent from the tarball, and the only shipped source is...

MAL-2026-16151 Malicious code in sql-limit-enforcer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8126bab8131e5781af023537f7c5fc2456929c104f71312eeddcea358b5659 Package ships no legitimate functionality: package.json declares main=index.js which is absent from the tarball, and the only shipped source is...

ROOT-APP-NPM-CVE-2026-41324 CVE-2026-41324 in basic-ftp - Patched by Root

Root has patched CVE-2026-41324 in the basic-ftp package for Root:npm. Multiple fixed versions available...

MAL-2026-16161 Malicious code in meraz-project-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3081e87039a0a1582330f353797d15ba12cdb1c17828ab2ee7224b7c1ac4809 On npm install, the declared postinstall script bin/postinstall.js runs trackProject, which collects the installer's hostname, OS username,...

Malicious code in meraz-project-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3081e87039a0a1582330f353797d15ba12cdb1c17828ab2ee7224b7c1ac4809 On npm install, the declared postinstall script bin/postinstall.js runs trackProject, which collects the installer's hostname, OS username,...

CVE-2023-30533

POC - CVE-2023-30533 CVE-2023-30533 的 POC 按以下来源复制：https://cdn.sheetjs.com/advisories/CVE-2023-30533: root@kitploit: SheetJS Community Edition 版本 0.19.2 及之前的所有发行版均受影响。包括： root@kitploit: - SheetJS CDN 上版本 0.19.2 及之前的脚本和模块 2 - 以名称 xlsx 发布到 npmjs.com 的模块 3 - 从 npmjs.com 的 xlsx 包拉取的第三方 CDN 上的脚本 4 5 -...

ROOT-APP-NPM-GHSA-3F6P-5WW8-9RCR GHSA-3f6p-5ww8-9rcr in mysql2 - Patched by Root

Root has patched GHSA-3f6p-5ww8-9rcr in the mysql2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44494 CVE-2026-44494 in axios - Patched by Root

Root has patched CVE-2026-44494 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-MMX7-HFXF-JPPX GHSA-mmx7-hfxf-jppx in axios - Patched by Root

Root has patched GHSA-mmx7-hfxf-jppx in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-JQH4-M9W3-8HP9 GHSA-jqh4-m9w3-8hp9 in axios - Patched by Root

Root has patched GHSA-jqh4-m9w3-8hp9 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-PMV8-RQ9R-6J72 GHSA-pmv8-rq9r-6j72 in axios - Patched by Root

Root has patched GHSA-pmv8-rq9r-6j72 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-XJ6Q-8X83-JV6G GHSA-xj6q-8x83-jv6g in axios - Patched by Root

Root has patched GHSA-xj6q-8x83-jv6g in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-HCPX-6FM6-WX23 GHSA-hcpx-6fm6-wx23 in axios - Patched by Root

Root has patched GHSA-hcpx-6fm6-wx23 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44488 CVE-2026-44488 in axios - Patched by Root

Root has patched CVE-2026-44488 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-68JP-44VC-2X5H GHSA-68jp-44vc-2x5h in axios - Patched by Root

Root has patched GHSA-68jp-44vc-2x5h in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-42H9-826W-CGV3 GHSA-42h9-826w-cgv3 in axios - Patched by Root

Root has patched GHSA-42h9-826w-cgv3 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-7Q8Q-RJ6J-MHJQ GHSA-7q8q-rj6j-mhjq in axios - Patched by Root

Root has patched GHSA-7q8q-rj6j-mhjq in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42044 CVE-2026-42044 in axios - Patched by Root

Root has patched CVE-2026-42044 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44486 CVE-2026-44486 in axios - Patched by Root

Root has patched CVE-2026-44486 in the axios package for Root:npm. Multiple fixed versions available...