ROOT-APP-NPM-CVE-2023-37466 CVE-2023-37466 in vm2 - Patched by Root

Root has patched CVE-2023-37466 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10725 AIKIDO-2026-10725 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10725 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10842 AIKIDO-2026-10842 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10842 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47139 CVE-2026-47139 in vm2 - Patched by Root

Root has patched CVE-2026-47139 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-22709 CVE-2026-22709 in vm2 - Patched by Root

Root has patched CVE-2026-22709 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-30547 CVE-2023-30547 in vm2 - Patched by Root

Root has patched CVE-2023-30547 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-26332 CVE-2026-26332 in vm2 - Patched by Root

Root has patched CVE-2026-26332 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47140 CVE-2026-47140 in vm2 - Patched by Root

Root has patched CVE-2026-47140 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47141 CVE-2026-47141 in vm2 - Patched by Root

Root has patched CVE-2026-47141 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10727 AIKIDO-2026-10727 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10727 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47209 CVE-2026-47209 in vm2 - Patched by Root

Root has patched CVE-2026-47209 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47698 CVE-2026-47698 in vm2 - Patched by Root

Root has patched CVE-2026-47698 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44007 CVE-2026-44007 in vm2 - Patched by Root

Root has patched CVE-2026-44007 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10808 AIKIDO-2026-10808 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10808 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10731 AIKIDO-2026-10731 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10731 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44002 CVE-2026-44002 in vm2 - Patched by Root

Root has patched CVE-2026-44002 in the vm2 package for Root:npm. Multiple fixed versions available...

Malicious code in external_deps_enjoyer (npm)

Source: amazon-inspector 8d4909b60251f0448ff7bc689262f363e3ec4c2cebf82abe3eb0c7f8769931a6 package.json declares dependencies and optionalDependencies whose specifiers point at non-registry, attacker-controlled or mutable sources rather than the npm registry. Listed sources include a Discord CDN...

MAL-2026-16071 Malicious code in cat-sis2go-utils (npm)

cat-sis2go-utils is a dependency-confusion package published against the SIS2GO namespace, with versions inflated to 99.0.0 and 99.1.0. It ships no library code index.js is an 87-byte stub, and package.json declares both preinstall and postinstall running node scripts/run.js, so the payload...

MAL-2026-16069 Malicious code in reactlogo-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f9d76fcf9f229c0a11508004a2be764133c6195530c4d56563eb28c358ab5f The package presents itself as a logo/color utility but its exported loadLogo function extracts a URL from LSB-encoded bits of a PNG, fetches the...

Malicious code in gloggo (npm)

Source: amazon-inspector a333f8ded17af0754357d938933ee95e9ab1f857cc875948d49cb9b26992e75d gloggo impersonates the legitimate gulpjs 'glogg' logging library by copying its README, shields, and LICENSE text attributed to Blaine Bublitz, while package.json attributes authorship to 'Blockvora Team '...