MAL-2026-16354 Malicious code in @woodpecker-web-shared/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5f21bcc5464689c5b7c70819eeca4ea481f76b5f7dac0358cfe2d967da235f On npm install, the package's postinstall hook runs node index.js, which collects installer host identifiers os.hostname, os.userInfo.username,...

npm-incident-response

npm-incident-response English | Português Standalone scanner for the keyv/cacheable supply-chain incident "Shai-Hulud: Here We Go Again", Aug 4 2026 — 440+ npm packages compromised by a self-propagating worm that steals cloud/CI credentials and plants persistence with a dead-man's switch. Detects...

CVE-2023-30533

POC - CVE-2023-30533 A POC for CVE-2023-30533 Copied as per: https://cdn.sheetjs.com/advisories/CVE-2023-30533: root@kitploit: All releases of SheetJS Community Edition up to version 0.19.2 are affected. This includes: root@kitploit: - scripts and modules on the SheetJS CDN through version 0.19.2...

ROOT-APP-NPM-CVE-2026-73650 CVE-2026-73650 in svgo - Patched by Root

Root has patched CVE-2026-73650 in the svgo package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-84370 CVE-2026-84370 in svgo - Patched by Root

Root has patched CVE-2026-84370 in the svgo package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-858273 AIKIDO-2026-858273 in svgo - Patched by Root

Root has patched AIKIDO-2026-858273 in the svgo package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-R7G4-QG5F-QQM2 GHSA-r7g4-qg5f-qqm2 in nodemailer - Patched by Root

Root has patched GHSA-r7g4-qg5f-qqm2 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-13033 CVE-2025-13033 in nodemailer - Patched by Root

Root has patched CVE-2025-13033 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-P6GQ-J5CR-W38F GHSA-p6gq-j5cr-w38f in nodemailer - Patched by Root

Root has patched GHSA-p6gq-j5cr-w38f in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-H3HJ-CMCX-XC66 GHSA-h3hj-cmcx-xc66 in nodemailer - Patched by Root

Root has patched GHSA-h3hj-cmcx-xc66 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10942 AIKIDO-2026-10942 in nodemailer - Patched by Root

Root has patched AIKIDO-2026-10942 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-645479 AIKIDO-2026-645479 in nodemailer - Patched by Root

Root has patched AIKIDO-2026-645479 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-82659 CVE-2026-82659 in nodemailer - Patched by Root

Root has patched CVE-2026-82659 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10941 AIKIDO-2026-10941 in nodemailer - Patched by Root

Root has patched AIKIDO-2026-10941 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-46982 CVE-2024-46982 in next - Patched by Root

Root has patched CVE-2024-46982 in the next package for Root:npm. Multiple fixed versions available...

CVE-2026-31802

🛡️ CVE-2026-31802 - Simple Proof of Concept Viewer 📋 About CVE-2026-31802 This repository provides a proof of concept PoC and write-up for CVE-2026-31802. The issue is a security vulnerability in the npm tar package. It allows attackers to trick the software into writing files outside its allowed...

scan-shai-hulud

scan-shai-hulud A fast, zero-dependency Bash scanner to detect whether your machine is affected by the CVE-2026-45321 "Mini Shai-Hulud" supply chain attack. On May 11, 2026, over 170 npm packages and 2 PyPI packages across TanStack, Mistral AI, UiPath, OpenSearch, and Guardrails AI were...

ROOT-APP-NPM-CVE-2026-64644 CVE-2026-64644 in next - Patched by Root

Root has patched CVE-2026-64644 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-64646 CVE-2026-64646 in next - Patched by Root

Root has patched CVE-2026-64646 in the next package for Root:npm. Multiple fixed versions available...

certighost-cve-2026-54121-slides

Certighost Slidev deck This directory contains the Slidev presentation for CVE-2026-54121.md. root@kitploit: npm install npm run dev Other commands: root@kitploit: npm run build npm run export The source deck is slides.md. Deck-wide styling is in style.css, and Mermaid settings are in...