MAL-2026-11676 Malicious code in @or-sdk/billing-internal (npm)

npm/@or-sdk/billing-internal is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @fairwords/encryption (npm)

The @fairwords/encryption package was compromised as part of the TeamPCP/CanisterWorm campaign. A postinstall hook executes node scripts/check-env.js || true which performs multi-stage credential harvesting, encrypted exfiltration, and self-propagation. The payload harvests 40+ environment variab...

EUVD-2025-135000

Malicious code in zaskia-poke13 npm...

EUVD-2025-96060

Malicious code in ocha-tahutek72-breki npm...

EUVD-2025-105856

Malicious code in dewi-gulai63-breki npm...

EUVD-2025-40929

Malicious code in tomi-kue67-sluey npm...

EUVD-2025-34137

Malicious code in internal-greeter-utils npm...

MAL-2025-43606 Malicious code in bella-ragi4-breki (npm)

The package bella-ragi4-breki was found to contain malicious code...

Malicious code in todayistheday123 (npm)

The package todayistheday123 was found to contain malicious code...

Malicious code in okta-gandul53-breki (npm)

The package okta-gandul53-breki was found to contain malicious code...

Malicious code in brook-aspen-jdw189-project (npm)

The package brook-aspen-jdw189-project was found to contain malicious code...

Malicious code in @mosfe/sso-sdk (npm)

--- -= Per source details. Do not edit below this line.=-...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the integrity of protected information.

The vulnerability of the git-debuginfo-1.7.1 package for the Red Hat Enterprise Linux operating system can lead to a breach of protected information. This vulnerability can be exploited remotely...