ROOT-APP-NPM-CVE-2026-44009 CVE-2026-44009 in @rootio/vm2 - Patched by Root

Root has patched CVE-2026-44009 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-24118 CVE-2026-24118 in @rootio/vm2 - Patched by Root

Root has patched CVE-2026-24118 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

MAL-2026-10968 Malicious code in commonweb-rewards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 186ad60c2221871a68cd4513fc2d2295a0595156cdea7615a49de03572f2e8e8 The OpenSSF Package Analysis project identified 'commonweb-rewards' @ 99.9.1 npm as malicious. It is considered malicious because: - The package...

MAL-2026-10966 Malicious code in commonweb-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f81c6e2e081a09ccd8ad4ade2f34c142e2f0db5566c881ca78acaff3e4de84a The OpenSSF Package Analysis project identified 'commonweb-card' @ 99.9.1 npm as malicious. It is considered malicious because: - The package...

MAL-2026-10971 Malicious code in cxpw-offers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bab7a1da929ef8a5ecad197bb450f0fc908d3d486604672e9a71a7d7a1919389 The OpenSSF Package Analysis project identified 'cxpw-offers' @ 99.9.1 npm as malicious. It is considered malicious because: - The package...

NPM: brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups

NPM: brace-expansion: DoS via exponential-time expansion of consecutive non-expanding groups vulnerability discovered by ? in WordPress Npm brace-expansion versions 1.1.16...

MAL-2026-10920 Malicious code in alb-lambda-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18b4d2c02af6232b1a73b084148490b5d46143eb883aa076d55a386e62839b3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ROOT-APP-NPM-CVE-2026-1526 CVE-2026-1526 in @rootio/undici - Patched by Root

Root has patched CVE-2026-1526 in the @rootio/undici package for Root:npm. Multiple fixed versions available...

MAL-2026-10905 Malicious code in win-build-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10902 Malicious code in solana-web3-patched (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10897 Malicious code in golan125-homepage-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10896 Malicious code in flow-eslint-oxidized (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10894 Malicious code in exodus-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10892 Malicious code in claude-code-timer (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bytecraft (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10889 Malicious code in @public-for-cdao/utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10879 Malicious code in @dxcl/user-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10875 Malicious code in @dxcl/http-common-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10872 Malicious code in @dxcl/account-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10850 Malicious code in @gocortexio/npmgremlinbox-tapr-ohl-1-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0fbd65fb65b76a2422d3780b7c2c82554753c78740a272f5c064d40fa239437 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...