196121 matches found
Malicious code in webpackbootstrap5 (npm)
[email protected] typosquats bootstrap and ships a disguised in-browser proxy kit. Its bundled loader index-z2b7r4.js XOR-decodes a list of endpoints with a fixed key and injects remote scripts from https://dyingefforlessefforlessours.com via document.head.appendChild, then boots a...
Malicious code in @zaka13/thing (npm)
@zaka13/[email protected] ships the same disguised in-browser proxy kit as webpackbootstrap5 and webpackbootstrapscripts by the same publisher zaka13. Its YXBp.js loader matches those packages' index-z2b7r4.js same sha256: it XOR-decodes endpoints with a fixed key, injects remote scripts from...
Malicious code in @biz44/id12-client (npm)
This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...
Malicious code in @biz44/id95-client (npm)
This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...
Malicious code in @biz44/id99-client (npm)
This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...
Malicious code in @biz44/id10-client (npm)
This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...
Malicious code in id79-client (npm)
This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...
MAL-2026-16173 Malicious code in id79-client (npm)
This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...
Malicious code in @biz44/id44-client (npm)
This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...
MAL-2026-16140 Malicious code in tracker-cloudflare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b5bacf5779f1a1fa161ee38acbf61fda0dc18b3d0fe35213e2b0dc230c06e4 The package's preinstall hook runs node index.js, which collects host identifiers os.hostname, os.userInfo, homedir, DNS servers, cwd along with the...
NPM: yayson: Prototype pollution in Store/LegacyStore deserialization
NPM: yayson: Prototype pollution in Store/LegacyStore deserialization vulnerability discovered by ? in WordPress Npm yayson versions = 4.2.0...
@mockoon/cli (>=9.0.0, <=9.6.1), @mockoon/serverless (>=9.0.0, <=9.6.1) +2 more potentially affected by CVE-2026-59148 via @mockoon/commons-server (>=9.0.0, <=9.6.1)
@mockoon/commons-server NPM version =9.0.0, =9.0.0, =9.0.0, =0.0.1, =0.30.0, =0.40.0 Source cves: CVE-2026-59148 Source advisory: OSV:GHSA-RQX4-3F6Q-3X2V...
@mockoon/cli (>=9.0.0, <=9.6.1), @mockoon/serverless (>=9.0.0, <=9.6.1) +2 more potentially affected by CVE-2026-59149 via @mockoon/commons-server (>=9.0.0, <=9.6.1)
@mockoon/commons-server NPM version =9.0.0, =9.0.0, =9.0.0, =0.0.1, =0.30.0, =0.40.0 Source cves: CVE-2026-59149 Source advisory: OSV:GHSA-8WQC-V2Q8-VFF2...
NPM: FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix
NPM: FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix vulnerability discovered by ? in WordPress Npm mcp-from-openapi versions = 2.3.0, 2.5.0...
ROOT-APP-NPM-CVE-2026-67214 CVE-2026-67214 in nanoid - Patched by Root
Root has patched CVE-2026-67214 in the nanoid package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-67213 CVE-2026-67213 in nanoid - Patched by Root
Root has patched CVE-2026-67213 in the nanoid package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-73086 CVE-2026-73086 in nanoid - Patched by Root
Root has patched CVE-2026-73086 in the nanoid package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-9496 CVE-2026-9496 in pacote - Patched by Root
Root has patched CVE-2026-9496 in the pacote package for Root:npm. Multiple fixed versions available...