MAL-2026-17845 Malicious code in node-telegram-sockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaa0928c7e6cf97f1059c7c8ec8ea2c1ffe53c127480bfe8f5081b489676d26d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in node-telegram-sockets

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2026-109358 Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation

Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable 0666. Local unprivileged users on the node can modify the containerd config, for example overwriting the runc location, to escalate...

EUVD-2026-97660

Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable 0666. Local unprivileged users on the node can modify the containerd config, for example overwriting the runc location, to escalate...

MAL-2026-17837 Malicious code in @sanzoffc/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2838d53888242c50e19ce80fc949f25a34de59a1282fc3631abf64a671e7afe9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @sanzoffc/libsignal-node

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @saazkira/libsignal-node

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-17836 Malicious code in @saazkira/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c02ddff50116449dec10c106e58ae0c84f16919145b8e13ddea1a23b0f00e9c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17818 Malicious code in @alipclutch/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20a547c784c13d1a96d07b03039a8997721e06467bda6794a2a1cc14a2cb68ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @alipclutch/libsignal-node

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-17814 Malicious code in @mikudeveloper/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4749ec89d8c51729fbd97994a6a035ab229a56bb1094c4c47d9a3d68df050711 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @mikudeveloper/libsignal-node

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

ROOT-APP-NPM-CVE-2020-7720 CVE-2020-7720 in node-forge - Patched by Root

Root has patched CVE-2020-7720 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-0122 CVE-2022-0122 in node-forge - Patched by Root

Root has patched CVE-2022-0122 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-24772 CVE-2022-24772 in node-forge - Patched by Root

Root has patched CVE-2022-24772 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-WXGW-QJ99-44C2 GHSA-wxgw-qj99-44c2 in node-forge - Patched by Root

Root has patched GHSA-wxgw-qj99-44c2 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-24773 CVE-2022-24773 in node-forge - Patched by Root

Root has patched CVE-2022-24773 in the node-forge package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-24771 CVE-2022-24771 in node-forge - Patched by Root

Root has patched CVE-2022-24771 in the node-forge package for Root:npm. Multiple fixed versions available...

CVE-2026-109358: Incorrect Permission Assignment for Critical Resource

Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable 0666. Local unprivileged users on the node can modify the containerd config, for example overwriting the runc location, to escalate...

EulerOS 2.0 SP13 : kbd (EulerOS-SA-2026-4056)

According to the versions of the kbd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented...