195063 matches found
MAL-2026-15623 Malicious code in selfsigned-certificate (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26324f10054a4b02e6d50af8f5373115e113a01c37d636ed70df2be1dd1b6b92 index.js contains a hidden code path where calling the library's generateCertificates API with the value 10 triggers loadSampleCertificates, which...
npm-incident-response
npm-incident-response English | Português Standalone scanner for the keyv/cacheable supply-chain incident "Shai-Hulud: Here We Go Again", Aug 4 2026 — 440+ npm packages compromised by a self-propagating worm that steals cloud/CI credentials and plants persistence with a dead-man's switch. Detects...
ROOT-APP-NPM-GHSA-CJ63-JHHR-WCXV GHSA-cj63-jhhr-wcxv in dompurify - Patched by Root
Root has patched GHSA-cj63-jhhr-wcxv in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-CJMM-F4JC-QW8R GHSA-cjmm-f4jc-qw8r in dompurify - Patched by Root
Root has patched GHSA-cjmm-f4jc-qw8r in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-H8R8-WCCR-V5F2 GHSA-h8r8-wccr-v5f2 in dompurify - Patched by Root
Root has patched GHSA-h8r8-wccr-v5f2 in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-65903 CVE-2026-65903 in dompurify - Patched by Root
Root has patched CVE-2026-65903 in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-76MC-F452-CXCM GHSA-76mc-f452-cxcm in dompurify - Patched by Root
Root has patched GHSA-76mc-f452-cxcm in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-65914 CVE-2026-65914 in dompurify - Patched by Root
Root has patched CVE-2026-65914 in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-65898 CVE-2026-65898 in dompurify - Patched by Root
Root has patched CVE-2026-65898 in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-49978 CVE-2026-49978 in dompurify - Patched by Root
Root has patched CVE-2026-49978 in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-41240 CVE-2026-41240 in dompurify - Patched by Root
Root has patched CVE-2026-41240 in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-41238 CVE-2026-41238 in dompurify - Patched by Root
Root has patched CVE-2026-41238 in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-65902 CVE-2026-65902 in dompurify - Patched by Root
Root has patched CVE-2026-65902 in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-49459 CVE-2026-49459 in dompurify - Patched by Root
Root has patched CVE-2026-49459 in the dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-65913 CVE-2026-65913 in dompurify - Patched by Root
Root has patched CVE-2026-65913 in the dompurify package for Root:npm. Multiple fixed versions available...
Malicious code in evilpostinstall (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846e500b06f58769a2cb833be8e726ab1db04b327f4c614da6642eb46ae7dfe5 The package's postinstall lifecycle hook pipes the output of env through nc to a host reconstructed at install time from the package version string v...
ROOT-APP-NPM-CVE-2026-12151 CVE-2026-12151 in undici - Patched by Root
Root has patched CVE-2026-12151 in the undici package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-JQH4-M9W3-8HP9 GHSA-jqh4-m9w3-8hp9 in axios - Patched by Root
Root has patched GHSA-jqh4-m9w3-8hp9 in the axios package for Root:npm. Multiple fixed versions available...