184710 matches found
MAL-2026-10946 Malicious code in @akrai/core (npm)
The @akrai/core package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms so...
MAL-2026-10933 Malicious code in twilio-deploy (npm)
The twilio-deploy package is one of four byte-identical dependency-confusion squats of Twilio's npm namespace published by user 'yuva2210' maintainer email [email protected], all at the sentinel version 99.99.99 chosen to outrank any internal/private version and win resolution against a...
MAL-2026-10782 Malicious code in zoom-widget-xss-poc-paresh (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12586eeb5b7eb0c053d90b49fd966fe32f05fe1f551cfd36120de1ce25b34fea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in relativity-pdfjs-dist (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c48b9caf30af59020f36b25fb13fb54db5754b9d8ad311f857843171cc88915a The OpenSSF Package Analysis project identified 'relativity-pdfjs-dist' @ 5.8.2 npm as malicious. It is considered malicious because: - The...
MAL-2026-10778 Malicious code in relativity-pdfjs-dist (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c48b9caf30af59020f36b25fb13fb54db5754b9d8ad311f857843171cc88915a The OpenSSF Package Analysis project identified 'relativity-pdfjs-dist' @ 5.8.2 npm as malicious. It is considered malicious because: - The...
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack. The malicious package campaign, codenamed ViteVenom by Checkmarx, marks an expansion of ChainVeil , which was observed using...
MAL-2026-10776 Malicious code in n8n-nodes-final-mile (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c87dad5030c245317bd34041521d73d8c112d79018db381d749c80739d539f The package advertises itself as a community utility node for n8n but its declared main index.js is a self-executing IIFE that runs the moment n8n...
Malicious code in n8n-nodes-devops-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464fa8baaffef716b3920968d35dfbf6c8d49cd439ad5c5bd45050074436d79b Package masquerades as an n8n community node package.json declares n8n.nodes: "MyNode.js", a trivial placeholder while index.js contains an unrelated...
ROOT-APP-NPM-GHSA-76MC-F452-CXCM GHSA-76mc-f452-cxcm in @rootio/dompurify - Patched by Root
Root has patched GHSA-76mc-f452-cxcm in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-49459 CVE-2026-49459 in @rootio/dompurify - Patched by Root
Root has patched CVE-2026-49459 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-CJ63-JHHR-WCXV GHSA-cj63-jhhr-wcxv in @rootio/dompurify - Patched by Root
Root has patched GHSA-cj63-jhhr-wcxv in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-41240 CVE-2026-41240 in @rootio/dompurify - Patched by Root
Root has patched CVE-2026-41240 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-CJMM-F4JC-QW8R GHSA-cjmm-f4jc-qw8r in @rootio/dompurify - Patched by Root
Root has patched GHSA-cjmm-f4jc-qw8r in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-H8R8-WCCR-V5F2 GHSA-h8r8-wccr-v5f2 in @rootio/dompurify - Patched by Root
Root has patched GHSA-h8r8-wccr-v5f2 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-41238 CVE-2026-41238 in @rootio/dompurify - Patched by Root
Root has patched CVE-2026-41238 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-49978 CVE-2026-49978 in @rootio/dompurify - Patched by Root
Root has patched CVE-2026-49978 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-VXR8-FQ34-VVX9 GHSA-vxr8-fq34-vvx9 in @rootio/dompurify - Patched by Root
Root has patched GHSA-vxr8-fq34-vvx9 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44288 CVE-2026-44288 in @rootio/protobufjs - Patched by Root
Root has patched CVE-2026-44288 in the @rootio/protobufjs package for Root:npm. Multiple fixed versions available...