236612 matches found
GHSA-3PPC-4F35-3M26 vulnerabilities
Vulnerabilities for packages: sqlpad, renovate, kubeflow-pipelines, kubeflow-centraldashboard, rancher-api-ui, npm, eslint, py3-jupyterlab, code-server, langfuse, tileserver-gl, kubeflow-katib, node-gyp, pnpm-stage0, vitess, lerna, serve, prism, argo-workflows, saf, opensearch-dashboards, ts-patc...
CVE-2026-26996 vulnerabilities
Vulnerabilities for packages: sqlpad, renovate, kubeflow-pipelines, kubeflow-centraldashboard, rancher-api-ui, npm, eslint, py3-jupyterlab, code-server, langfuse, tileserver-gl, kubeflow-katib, node-gyp, pnpm-stage0, vitess, lerna, serve, prism, argo-workflows, saf, opensearch-dashboards, ts-patc...
GHSA-3PPC-4F35-3M26 vulnerabilities
Vulnerabilities for packages: kibana, pulumi, tileserver-gl-fips, py3-jupyterlab, vitess, graalvm, opentelemetry-auto-instrumentations-node, kubeflow-pipelines, emscripten, code-server, langfuse-fips, semaphore, pelias-api, eslint, actions-runner, langfuse, gemini-cli, wazuh-dashboard-fips,...
CVE-2026-26996 vulnerabilities
Vulnerabilities for packages: kibana, pulumi, tileserver-gl-fips, py3-jupyterlab, vitess, graalvm, opentelemetry-auto-instrumentations-node, kubeflow-pipelines, emscripten, code-server, langfuse-fips, semaphore, pelias-api, eslint, actions-runner, langfuse, gemini-cli, wazuh-dashboard-fips,...
Malicious code in cline (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d7531f4d4af07fee607e1d2985d0ea5b41dbf28cca5bc16c8457934e372f86 The package cline was found to contain malicious code. Source: ghsa-malware 3c16746b2d863d4c24bbc2297611c642a02942b47d12b675c4a3120911c72eec...
MAL-2026-945 Malicious code in ui5-cap-event-app-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837e841e2b75385a4e7c030237983cfe52f91373ffa3e56859c7055ac0a80f4d The package ui5-cap-event-app-server was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in abcxyzz (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b953a8183a1a7ba906c9117e8afe658b2606311b606d8b3ecad680076fc51e9 The package abcxyzz was found to contain malicious code. Source: ossf-package-analysis b22a45e3a267d5930d5e8dfdb52954bf049c7b63a9bdb0818e5daff1191e74...
OpenClaw Affected by Remote Code Execution via System Prompt Injection in Slack Channel Descriptions
Summary When the Slack integration is enabled, Slack channel metadata topic/description could be incorporated into the model's system prompt. Impact Prompt injection is a documented risk for LLM-driven systems. This issue increased the injection surface by allowing untrusted Slack channel metadat...
Malicious code in vds-monarch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9fc03a6a0feff43eef44ac91f0e9ce68c422a439528842f139bf1164366c66d The package vds-monarch was found to contain malicious code. Source: ghsa-malware 23d64f4764ccc88b26aa567b6d6828093fe8d35500ac67a19ced44828073dbf4 An...
Malicious code in realestate-ask (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4db310e1c17bbf02575dc3a75ab56d4d38581001d31617c583443f7d88a126 The package realestate-ask was found to contain malicious code. Source: ghsa-malware 75a155e1870bd51f018f66476427d1da99c87cbbcab800c354dad13f76b67c3b...
MAL-2026-922 Malicious code in compass-e2e-tests (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a245065291bd7252411254769a1764aab8e228c8ca161708734a3d47d3c9ec The package compass-e2e-tests was found to contain malicious code. Source: ghsa-malware...
Malicious code in compass-e2e-tests (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a245065291bd7252411254769a1764aab8e228c8ca161708734a3d47d3c9ec The package compass-e2e-tests was found to contain malicious code. Source: ghsa-malware...
MAL-2026-919 Malicious code in mds-webcomponents (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b33015300fa18b6b3d2c2f1c0af0e77cbd9fa96c7af7befbe61a5422165824e package.json declares preinstall: node index.js, which runs automatically on every npm install. index.js collects os.homedir, os.hostname,...
Malicious code in @qualys/react-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c63e27e2c86203c152f6f7bfc30136a44d93bfbc84522fcf86ca97976511a59 The package @qualys/react-web was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in ethereums-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddbe5ea052b93fa04966b01c8302455e06311fd6015aaf9c76c07ba8c8f21c4 The package ethereums-lint was found to contain malicious code. Source: ghsa-malware 7671a5fea1c5f2b0118bd9981213bde2b546a4191a57acd041aed6d8560c0de6...
Malicious code in ethereum-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f139611e5bee8bd888911afc42c4e762ba55dc37cb142d92fe4203209f917600 The package ethereum-lint was found to contain malicious code. Source: ghsa-malware d4db9b610771f0e6a14c8e5de6545323a4041420731492b2265b31ec14fdaa3b...
MAL-2026-942 Malicious code in ethereum-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f139611e5bee8bd888911afc42c4e762ba55dc37cb142d92fe4203209f917600 The package ethereum-lint was found to contain malicious code. Source: ghsa-malware d4db9b610771f0e6a14c8e5de6545323a4041420731492b2265b31ec14fdaa3b...
MAL-2026-908 Malicious code in hops-preset-jest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8165500e6c415192d0b46d0e106f29fb3ae49fce7538b2da40a9e398998c087d The package hops-preset-jest was found to contain malicious code. Source: ghsa-malware d1e4e88ca9b17e3778d9b7f4aa3d9cb2a94cc7ac234505750c84264eb43440...
MAL-2026-895 Malicious code in json-mapping-src (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc958aaacb5ea616283510ccda98b0a4634c35d348eece1613366ac66ad41abb The package json-mapping-src was found to contain malicious code. Source: ghsa-malware 8e7f8a61a6a361880bea88321b1f130627266e5f1d54e8aa9d9f47d64c99db...
Malicious code in json-mapping-src (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc958aaacb5ea616283510ccda98b0a4634c35d348eece1613366ac66ad41abb The package json-mapping-src was found to contain malicious code. Source: ghsa-malware 8e7f8a61a6a361880bea88321b1f130627266e5f1d54e8aa9d9f47d64c99db...