142645 matches found
Malicious code in encryptstringadmincore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb9468e3d6f153d718527bb4350b6593d64b67cf16b5b81cdf56e4781d1b483 The package's main module core.js is heavily obfuscated obfuscator.io-style string-array with self-defending anti-debug and control-flow flattening a...
MAL-2026-11012 Malicious code in encryptstringadmin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e862c6a1d5cf9a77c2060f767e7144e9a73b77913c801dbf23f571ca5d3e054 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11013 Malicious code in encryptstringadmincore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb9468e3d6f153d718527bb4350b6593d64b67cf16b5b81cdf56e4781d1b483 The package's main module core.js is heavily obfuscated obfuscator.io-style string-array with self-defending anti-debug and control-flow flattening a...
ROOT-APP-NPM-CVE-2026-44240 CVE-2026-44240 in @rootio/basic-ftp - Patched by Root
Root has patched CVE-2026-44240 in the @rootio/basic-ftp package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-6V7Q-WJVX-W8WG GHSA-6v7q-wjvx-w8wg in @rootio/basic-ftp - Patched by Root
Root has patched GHSA-6v7q-wjvx-w8wg in the @rootio/basic-ftp package for Root:npm. Multiple fixed versions available...
MAL-2026-10983 Malicious code in svelte-streaks (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b07b98d6a7986da479ed75708e37dfbff0df7a6ee136f7dad1db24087bed2cf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10980 Malicious code in nolby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8bc0fa5eb23a45d27933ce1d32b7fabed27182039e170dbcaa38c0462dfa20 The package advertises itself as a pure calendar/streak math library with no import-time side effects, but index.mjs invokes a top-level sync on modu...
MAL-2026-10984 Malicious code in veskra (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4618cc8c89ff606f81079aef2e98920220ca9e59ec284c8d6c18167208604a3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, opensearch-dashboards, wazuh-dashboard, wazuh-dashboard-fips, opensearch-dashboards-fips, gitlab-rails-ce-fips, actions-runner, graalvm, lerna, saf, kibana, pulumi, code-server, kubeflow-centraldashboard, sqlpad, prism, npm...
GHSA-W8WR-V893-VJVP vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, opensearch-dashboards, wazuh-dashboard, wazuh-dashboard-fips, opensearch-dashboards-fips, gitlab-rails-ce-fips, actions-runner, graalvm, lerna, saf, kibana, pulumi, code-server, kubeflow-centraldashboard, sqlpad, homepage, prism, npm...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, opensearch-dashboards, wazuh-dashboard, wazuh-dashboard-fips, opensearch-dashboards-fips, gitlab-rails-ce-fips, actions-runner, graalvm, lerna, saf, kibana, pulumi, code-server, kubeflow-centraldashboard, sqlpad, homepage, prism, npm...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, opensearch-dashboards, wazuh-dashboard, wazuh-dashboard-fips, opensearch-dashboards-fips, gitlab-rails-ce-fips, actions-runner, graalvm, lerna, saf, kibana, pulumi, code-server, kubeflow-centraldashboard, sqlpad, homepage, prism, npm...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: sqlpad, code-server, kubeflow-centraldashboard, lerna, saf, npm, prism, pulumi...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: sqlpad, code-server, kubeflow-centraldashboard, lerna, saf, npm, prism, pulumi...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: sqlpad, code-server, kubeflow-centraldashboard, lerna, saf, npm, prism, pulumi...
ROOT-APP-NPM-CVE-2022-24999 CVE-2022-24999 in @rootio/qs - Patched by Root
Root has patched CVE-2022-24999 in the @rootio/qs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-26956 CVE-2026-26956 in @rootio/vm2 - Patched by Root
Root has patched CVE-2026-26956 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10844 AIKIDO-2026-10844 in @rootio/vm2 - Patched by Root
Root has patched AIKIDO-2026-10844 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...