195361 matches found
Malicious code in @nebula.js/nucleus (npm)
npm/@nebula.js/nucleus is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...
MAL-2026-12016 Malicious code in @keyv/memcache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738202807ef51e0d987243e641bb2e97a2f4535bed388d631d80ead963a82b2f Package @keyv/[email protected] is a Keyv storage adapter for Memcache. No install-time lifecycle scripts, network exfiltration, credential access,...
Malicious code in @keyv/sqlite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014d7cead2743892c76e6718cfbceb4bd4e97681f2281aa5fe283d964e2a01a9 @keyv/sqlite is the SQLite storage adapter for the Keyv key-value library. No malicious code patterns, install-time network fetches, credential reads...
MAL-2026-12020 Malicious code in @keyv/redis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6bb14bdfcd4aae57a41c9e6e04cd5f612b12e0f45fbcb57510ccb44b095e77 Analysis of @keyv/[email protected] produced no a static rule matches and no traced behavioral findings. The package is a Redis storage adapter for the key...
MAL-2026-12018 Malicious code in @keyv/mysql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e7b09271ef0584c4ab876898b9cb09c6cc8a0408bd4bbb7d623726d12c392e @keyv/mysql is the MySQL storage adapter for the keyv key-value abstraction. No exfiltration, install-time fetch-and-execute, silent-relay, credentia...
Malicious code in @keyv/mysql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e7b09271ef0584c4ab876898b9cb09c6cc8a0408bd4bbb7d623726d12c392e @keyv/mysql is the MySQL storage adapter for the keyv key-value abstraction. No exfiltration, install-time fetch-and-execute, silent-relay, credentia...
Malicious code in @keyv/encrypt-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c28175ab56ea558a0634ba48421de59c05f3ebc5e06335162cd2d30a6972495 No static or traced-code signals of installer-side attack were observed in this version of @keyv/encrypt-node. No lifecycle-script fetch-and-execute,...
MAL-2026-12014 Malicious code in @keyv/encrypt-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb40fe6b9df197abf3018c58ce0ab5a9cdb11d3e9bddc636de1779c5c509948c The package contents produced no a static rule matches and no traced behavior indicating credential access, install-time or import-time code executio...
Malicious code in @keyv/test-suite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710c3cc7a3215d4a3bfa506c57bf04ffc7973d33da9dca652060a6bf1d0a4856 @keyv/test-suite is a shared test harness used by keyv storage adapter packages. No install-time lifecycle hooks, remote fetches, credential reads,...
MAL-2026-12007 Malicious code in @keyv/bigmap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8f8e82f91c41a43a5730b8c4d545e0b2e7b8b43b0945d656f937ce6b4adf79 The package contents did not exhibit any behaviors associated with supply-chain attacks: no install/preinstall/postinstall lifecycle hooks fetching o...
ROOT-APP-NPM-GHSA-28HP-FGCR-2R4H GHSA-28hp-fgcr-2r4h in angular - Patched by Root
Root has patched GHSA-28hp-fgcr-2r4h in the angular package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-21490 CVE-2024-21490 in angular - Patched by Root
Root has patched CVE-2024-21490 in the angular package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-8372 CVE-2024-8372 in angular - Patched by Root
Root has patched CVE-2024-8372 in the angular package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-5CP4-XMRW-59WF GHSA-5cp4-xmrw-59wf in angular - Patched by Root
Root has patched GHSA-5cp4-xmrw-59wf in the angular package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2023-26116 CVE-2023-26116 in angular - Patched by Root
Root has patched CVE-2023-26116 in the angular package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-0716 CVE-2025-0716 in angular - Patched by Root
Root has patched CVE-2025-0716 in the angular package for Root:npm. Multiple fixed versions available...
Malicious code in @servicetitan/suppress-warnings (npm)
npm/@servicetitan/suppress-warnings is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11928 Malicious code in @servicetitan/suppress-warnings (npm)
npm/@servicetitan/suppress-warnings is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...