MAL-2026-15623 Malicious code in selfsigned-certificate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26324f10054a4b02e6d50af8f5373115e113a01c37d636ed70df2be1dd1b6b92 index.js contains a hidden code path where calling the library's generateCertificates API with the value 10 triggers loadSampleCertificates, which...

ROOT-APP-NPM-CVE-2026-65903 CVE-2026-65903 in dompurify - Patched by Root

Root has patched CVE-2026-65903 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-H8R8-WCCR-V5F2 GHSA-h8r8-wccr-v5f2 in dompurify - Patched by Root

Root has patched GHSA-h8r8-wccr-v5f2 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-CJ63-JHHR-WCXV GHSA-cj63-jhhr-wcxv in dompurify - Patched by Root

Root has patched GHSA-cj63-jhhr-wcxv in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-CJMM-F4JC-QW8R GHSA-cjmm-f4jc-qw8r in dompurify - Patched by Root

Root has patched GHSA-cjmm-f4jc-qw8r in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-65914 CVE-2026-65914 in dompurify - Patched by Root

Root has patched CVE-2026-65914 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-41238 CVE-2026-41238 in dompurify - Patched by Root

Root has patched CVE-2026-41238 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-49459 CVE-2026-49459 in dompurify - Patched by Root

Root has patched CVE-2026-49459 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-65913 CVE-2026-65913 in dompurify - Patched by Root

Root has patched CVE-2026-65913 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-41240 CVE-2026-41240 in dompurify - Patched by Root

Root has patched CVE-2026-41240 in the dompurify package for Root:npm. Multiple fixed versions available...

Malicious code in evilpostinstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846e500b06f58769a2cb833be8e726ab1db04b327f4c614da6642eb46ae7dfe5 The package's postinstall lifecycle hook pipes the output of env through nc to a host reconstructed at install time from the package version string v...

ROOT-APP-NPM-CVE-2026-0000 CVE-2026-0000 in react-leaflet-heatmap-layer - Patched by Root

Root has patched CVE-2026-0000 in the react-leaflet-heatmap-layer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-8J8C-7JFH-H6HX GHSA-8j8c-7jfh-h6hx in js-yaml - Patched by Root

Root has patched GHSA-8j8c-7jfh-h6hx in the js-yaml package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-48712 CVE-2026-48712 in protobufjs - Patched by Root

Root has patched CVE-2026-48712 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-41242 CVE-2026-41242 in protobufjs - Patched by Root

Root has patched CVE-2026-41242 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44291 CVE-2026-44291 in protobufjs - Patched by Root

Root has patched CVE-2026-44291 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-36665 CVE-2023-36665 in protobufjs - Patched by Root

Root has patched CVE-2023-36665 in the protobufjs package for Root:npm. Multiple fixed versions available...

npm-demo

Demostración del Navegador NPM/JavaScript Para instrucciones sobre cómo ejecutar y usar esta demostración, consulte la Guía de prueba práctica...

MAL-2026-15602 Malicious code in redis-cookie-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c94026a508b2ada8c891551c8ccd622f86c2ba2e7b6a7c181fc3eb538e2f1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in redis-cookie-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c94026a508b2ada8c891551c8ccd622f86c2ba2e7b6a7c181fc3eb538e2f1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...