143332 matches found
MAL-2026-474 Malicious code in @transaction-list/transaction-list-md (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5e5850b5f3f231ca816e6f9c5ae2f7dac1b33092f12407be92abe5f1e26d4a The package @transaction-list/transaction-list-md was found to contain malicious code...
CVE-2026-0775
npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of npm cli. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...
npm CLI security vulnerabilities
npm CLI is a package manager developed by the American company npm. There is a security vulnerability in npm CLI, which stems from loading modules from insecure locations, potentially leading to privilege escalation and the execution of arbitrary code...
CVE-2026-24001 vulnerabilities
Vulnerabilities for packages: grafana, ts-patch, actions-runner, vitess, semaphore, kubeflow-katib, npm, tileserver-gl, langfuse, argo-workflows, grafana-fips, tileserver-gl-fips, sqlpad, redisinsight, saf, thingsboard, renovate, prism, thingsboard-fips, drupal, langfuse-fips, graalvm, librechat...
Malicious code in uuu8lgd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1048ec8371fbc694883c71f227674b6b7ba3dcf534b1ed096ce4342a6e129920 The package uuu8lgd was found to contain malicious code. Source: ossf-package-analysis 07f7eda587433e48aed22a16c8f76973b55a61815311f38620239874795203...
Malicious Package
Overview @ikeacn/utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in @ikeacn/utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61cac48e6bd5a0c800a2b821dafa52f34ae61a0592089305f0f308b264390b0 The package @ikeacn/utils was found to contain malicious code. Source: ghsa-malware 25e3e51050a140b96f55be4f132f695cd77cf380a7a0dea9e48bde3b5064df7c...
EUVD-2026-4183
Malicious code in @ikeacn/utils npm...
EUVD-2026-4187
Malicious code in @corp-front/corporate-filter-company-select npm...
Malicious code in corporate-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a096b32dfa76f7e64480d72862c34ec7e644ac03db51ad09af0eb1f929d637a1 The package corporate-blocking was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2026-4188
Malicious code in corporate-blocking npm...
EUVD-2026-4186
Malicious code in pay-by-bank-dashboard-server npm...
MAL-2026-459 Malicious code in un112 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1521874d670863316d54ec7213c067617cac71476025f1e398ca9ea01fe1f71 The package un112 was found to contain malicious code. Source: ossf-package-analysis cdd54832c7f264a3a18301f19d464ca271573a29173fe997e49e6c55b0ae1f87...
Malicious code in un112 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1521874d670863316d54ec7213c067617cac71476025f1e398ca9ea01fe1f71 The package un112 was found to contain malicious code. Source: ossf-package-analysis cdd54832c7f264a3a18301f19d464ca271573a29173fe997e49e6c55b0ae1f87...
EUVD-2026-4185
Malicious code in un112 npm...
Malicious code in @mailpoet/component (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d48b40574c65ef747944583fa5a49ac40b673d6932a02247c2cdbd5331a79179 The package @mailpoet/component was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-4191
Malicious code in @mailpoet/component npm...
Malicious Package
Overview @alluxio/common-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in csv-parsing-xz (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbd0bb44a5de8aaaa9d2397fe8ff5fa7e9a7274bb5d6efe9ef6af97ba8747692 The package csv-parsing-xz was found to contain malicious code. Source: ghsa-malware 40d41fc1adde6793bd8a6626e41da04bcb68b4934a4760eeb34c278ed6165adf...