137480 matches found
Malicious code in poly-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5aab464aac47233efb564c52d5818fef783efa856f8318c61d61ef99ca0da4e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-6287 Malicious code in poly-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5aab464aac47233efb564c52d5818fef783efa856f8318c61d61ef99ca0da4e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
CVE-2026-12151 vulnerabilities
Vulnerabilities for packages: code-server, vitess, node-gyp, saf, actions-runner, gemini-cli, npm, prism, py3-captum, haraka, kibana, pelias-api, renovate...
CVE-2026-11525 vulnerabilities
Vulnerabilities for packages: code-server, vitess, node-gyp, saf, actions-runner, gemini-cli, npm, prism, py3-captum, haraka, kibana, pelias-api, renovate...
CVE-2026-6733 vulnerabilities
Vulnerabilities for packages: code-server, vitess, node-gyp, saf, actions-runner, gemini-cli, npm, prism, py3-captum, haraka, kibana, pelias-api, renovate...
GHSA-G8M3-5G58-FQ7M vulnerabilities
Vulnerabilities for packages: code-server, vitess, node-gyp, saf, actions-runner, gemini-cli, npm, prism, py3-captum, haraka, kibana, pelias-api, renovate...
GHSA-35P6-XMWP-9G52 vulnerabilities
Vulnerabilities for packages: code-server, vitess, node-gyp, saf, actions-runner, gemini-cli, npm, prism, py3-captum, haraka, kibana, pelias-api, renovate...
CVE-2026-9679 vulnerabilities
Vulnerabilities for packages: code-server, vitess, node-gyp, saf, actions-runner, gemini-cli, npm, prism, py3-captum, haraka, kibana, pelias-api, renovate...
GHSA-P88M-4JFJ-68FV vulnerabilities
Vulnerabilities for packages: code-server, vitess, node-gyp, saf, actions-runner, gemini-cli, npm, prism, py3-captum, haraka, kibana, pelias-api, renovate...
CVE-2026-12151 vulnerabilities
Vulnerabilities for packages: renovate, prism, saf, npm, vitess, code-server, node-gyp...
CVE-2026-6733 vulnerabilities
Vulnerabilities for packages: renovate, prism, saf, npm, vitess, code-server, node-gyp...
GHSA-G8M3-5G58-FQ7M vulnerabilities
Vulnerabilities for packages: renovate, prism, saf, npm, vitess, code-server, node-gyp...
GHSA-P88M-4JFJ-68FV vulnerabilities
Vulnerabilities for packages: renovate, prism, saf, npm, vitess, code-server, node-gyp...
GHSA-VXPW-J846-P89Q vulnerabilities
Vulnerabilities for packages: renovate, prism, saf, npm, vitess, code-server, node-gyp...
CVE-2026-11525 vulnerabilities
Vulnerabilities for packages: renovate, prism, saf, npm, vitess, code-server, node-gyp...
CVE-2026-9679 vulnerabilities
Vulnerabilities for packages: renovate, prism, saf, npm, vitess, code-server, node-gyp...
ROOT-APP-NPM-CVE-2025-54798 CVE-2025-54798 in @rootio/tmp - Patched by Root
Root has patched CVE-2025-54798 in the @rootio/tmp package for Root:npm. Multiple fixed versions available...
MAL-2026-6249 Malicious code in blinkit-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca70b0a6be36daf245deb50dd6b3595a9bfba29c62770e82365152a02832cf8 On npm install, the package's preinstall lifecycle hook runs curl against http://d8s0b82plbq3u5sb2vo0sb3a9obr4yjt7.oast.site/ and POSTs the installer...
Malicious code in zomato-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1b48a397992964f8f3982dc69a33431bfb26c911c29a1e5d124581cef46a40 Dependency-confusion package targeting an internal Zomato namespace. The package ships only a stub index.js module.exports = name: 'zomato-config',...
MAL-2026-6261 Malicious code in sf-storybook (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a1a34bbf1dc84732509c5c5bfbd65adcd442b2665367d0c1bd39dc8301001c On require'sf-storybook', index.js shells out via childprocess to run cat /etc/passwd ./passwd.txt and then POSTs the file contents via curl to...