236626 matches found
MAL-2026-308 Malicious code in sd-navbar-module-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5eb5c5baa5e482655961b2dd4ced29ff771428c5870106e0a30cc916913908 The package sd-navbar-module-client was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-3098
Malicious code in omnicore-ds2-sdk2 npm...
EUVD-2026-3093
Malicious code in spire.officejs-externs npm...
MAL-2026-315 Malicious code in tailwind-merge-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe4dad53bfa4f2ffe409644975e17958c4a1ab064109707aa6d944c1030b959 The package tailwind-merge-v2 was found to contain malicious code. Source: ghsa-malware...
MAL-2026-259 Malicious code in @riag-libs/pattern-library-react-hooks (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64366b918bd4380cf8b087a445df7d86ef18b21686c577a9ed7bdd523aceac64 The package @riag-libs/pattern-library-react-hooks was found to contain malicious code. Source: ghsa-malware...
MAL-2026-279 Malicious code in dibels8-content (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0822fb035f2f2b218e9bbb86896773e4f423334de708e5fe40ab853a4d22abfe The package dibels8-content was found to contain malicious code. Source: ghsa-malware 68b763b414011b0fcdc784120c3cc7890b7a8bff93ba2d0ea2f43df38880f97...
MAL-2026-261 Malicious code in @spx-delivery/react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03f32e2859ef16f71897fc985589e436c704979df087b57bb61fedb63e89c51 The package @spx-delivery/react was found to contain malicious code. Source: ghsa-malware...
MAL-2026-286 Malicious code in forms-new-design (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf1f5f8d78c6e26b45ef4a895859922f68ff7afb558284111a34f497681b324 The package forms-new-design was found to contain malicious code. Source: ghsa-malware 45f98af63ec853b571da818f8d974890156b0fd52c9c2ab3fa74a4e213ff3f...
MAL-2026-290 Malicious code in kc-fe-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4347dd194760b4442f9bb1feab4f7133c2413af7958a4081f8cdea8367241da The package kc-fe-cli was found to contain malicious code. Source: ghsa-malware 42b0817927a50dccc81b965c476f842127ddf7f97445006910ebc9f6fa9e8026 Any...
Malicious code in experian-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629f30cfc3fe4cc45698b5cce11973037d0fa7f6564fc999aef0247701f6fee5 The package experian-design-system was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-3073
Malicious code in experian-design-system npm...
MAL-2026-282 Malicious code in experian-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629f30cfc3fe4cc45698b5cce11973037d0fa7f6564fc999aef0247701f6fee5 The package experian-design-system was found to contain malicious code. Source: ghsa-malware...
MAL-2026-258 Malicious code in webmd-page-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ac133760e765dbcb76befb93e31a79e19da15b27c94d4b5da3b8e43c00f2b1 The package webmd-page-common was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-2842
Malicious code in webmd-page-common npm...
MAL-2026-257 Malicious code in silvermine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b977fbc50506142e7db68fc536bdfd96ccfa135ff0c03f3957d24b716cc4441 The package silvermine was found to contain malicious code. Source: ghsa-malware 194377d773e651f6f01c9662fac716fb338b55f83baafc1c503b692fe1195e5a Any...
EUVD-2026-2846
Malicious code in silvermine npm...
EUVD-2026-2096
Renovate vulnerable to arbitrary command injection via npm manager and malicious Renovate configuration...
Renovate vulnerable to arbitrary command injection via npm manager and malicious Renovate configuration
Summary The user-provided string packageName in the npm manager is appended to the npm install command during lock maintenance without proper sanitization. Details Adversaries can provide a maliciously crafted Renovate configuration file to trick Renovate to execute arbitrary code. The...