195370 matches found
Malicious code in @heartlandone-private/fontawesome-pro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc8f9f53c05ecc2642ce82c3841e046025662c206f002b4c6da11ff0cbc763d The package's postinstall lifecycle hook runs node index.js, which issues an HTTPS GET to a hardcoded Burp Collaborator subdomain at...
MAL-2026-11105 Malicious code in xo-twofa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47761909a1686ad1db2239f5055c8526e38ac88c07060c886157d157d15b4315 package.json declares a preinstall script that runs node index.js on npm install. index.js collects host identifiers os.hostname, os.platform, os.arc...
MAL-2026-11100 Malicious code in identityauthorizationserv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4808d7fab80b2202538cad6c5a1be4d62eb973ac35eb3a431fdf33f68b67ee [email protected] wires scripts.preinstall to node index.js, so on npm install the package auto-executes code that collects host...
Malicious code in stargateproxyserv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f37695676321e5bdbf3c1ff13f97619eb46b57d7796f66c3b1448633626858 [email protected] declares a preinstall script that runs node index.js, which collects installer host identifiers os.hostname, os.platform,...
MAL-2026-11103 Malicious code in stargateproxyserv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f37695676321e5bdbf3c1ff13f97619eb46b57d7796f66c3b1448633626858 [email protected] declares a preinstall script that runs node index.js, which collects installer host identifiers os.hostname, os.platform,...
003-gas-convert (1.0.1), 108-gas-convert (1.0.0) +9283 more potentially affected by CVE-2018-1002203 +2 more via unzipper (>=0.3.0, <=0.12.5)
unzipper NPM version =0.3.0, =4.3.4, =2.0.0, =3.0.0, =2.0.0, =1.0.0, =1.0.26, =0.0.80, =1.0.0-beta.1, =0.0.1, =1.0.7, =1.3.0 and more Source cves: CVE-2018-1002203, CVE-2026-17514, CVE-2026-59972 Source advisory: SNYK:JS-UNZIPPER-18365659...
MAL-2026-11099 Malicious code in demo-awesome-date-parser-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5cccf4c1379e6c3f9af7dde45277b1c4db552a0ad878bc08378ad6e8879b497 The package advertises itself as a date parser but ships a heavily obfuscated payload in src/index.js. The exported demoParseDate function invokes...
Malicious code in @array-util/subsearch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793344e3c658f3649a113e29dd1124d979af9a7978f3159c55f8da6f6b3bc918 The package's index.js is heavily obfuscated string-array shift/rotate pattern with hex-encoded indices and a while!! decoder loop. Obfuscation in a...
Malicious Package
Overview @array-util/subsearch is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
ROOT-APP-NPM-CVE-2025-69873 CVE-2025-69873 in @rootio/ajv - Patched by Root
Root has patched CVE-2025-69873 in the @rootio/ajv package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54312 CVE-2026-54312 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-54312 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54301 CVE-2026-54301 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-54301 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54306 CVE-2026-54306 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-54306 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-664H-GPGQ-H6XX GHSA-664h-gpgq-h6xx in @rootio/n8n - Patched by Root
Root has patched GHSA-664h-gpgq-h6xx in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44789 CVE-2026-44789 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-44789 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-3875-8GCX-7V46 GHSA-3875-8gcx-7v46 in @rootio/n8n - Patched by Root
Root has patched GHSA-3875-8gcx-7v46 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-HV7X-3X78-GX53 GHSA-hv7x-3x78-gx53 in @rootio/n8n - Patched by Root
Root has patched GHSA-hv7x-3x78-gx53 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44791 CVE-2026-44791 in @rootio/n8n - Patched by Root
Root has patched CVE-2026-44791 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...