613846 matches found
Malicious code in xo-member-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4180bb77cfdee32b5d3547f4edf9c8962fb4bbe6ee595275241cb0871d2371 index.js runs as a preinstall lifecycle script on npm install. It collects host identity and network configuration — os.hostname, os.platform, os.arc...
Malicious code in f0-form-manipulator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 058782981a80d3fc90af74a840a00cefa0c58b9861c481d0444b7f4f3e6a014b On npm install, the package's preinstall hook executes index.js, which collects host identifiers os.hostname, os.platform, os.arch, os.homedir,...
MAL-2026-11060 Malicious code in f0-form-manipulator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 058782981a80d3fc90af74a840a00cefa0c58b9861c481d0444b7f4f3e6a014b On npm install, the package's preinstall hook executes index.js, which collects host identifiers os.hostname, os.platform, os.arch, os.homedir,...
MAL-2026-11062 Malicious code in preferenceslifecycle-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33d1db03ba9b9f1d9dc9f4c81a574e5baa69549e6c1897230540fe15d2749a3 The package's preinstall hook executes index.js, which collects host identifiers os.hostname, os.platform, os.arch, os.homedir, and dns.getServers an...
Malicious code in preferenceslifecycle-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33d1db03ba9b9f1d9dc9f4c81a574e5baa69549e6c1897230540fe15d2749a3 The package's preinstall hook executes index.js, which collects host identifiers os.hostname, os.platform, os.arch, os.homedir, and dns.getServers an...
Malicious code in merchantprefsservice-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145fc1d224cc012a8cbdea5823b1573df6400ce6a24837b2c25710772152724f The package's preinstall script index.js executes automatically on npm install and collects host identifiers — hostname, platform, arch, home directo...
Malicious code in gpaas-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f698d94fead72f888459a0773a7715dd974433c4624134b743098b61e74f9a9f On npm install, the package's preinstall script runs index.js which collects the installer's hostname, platform, architecture, home directory path, a...
MAL-2026-11056 Malicious code in gpaas-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f698d94fead72f888459a0773a7715dd974433c4624134b743098b61e74f9a9f On npm install, the package's preinstall script runs index.js which collects the installer's hostname, platform, architecture, home directory path, a...
MAL-2026-11059 Malicious code in pp-react-ui5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee26042aed9ed8c50ffaa9b8fd40df265099c14441c38542bbfce3c529ceef3 Analysis of [email protected] 4 files surfaced no behaviors matching supply-chain attack classes: no lifecycle scripts fetching or executing remote...
Malicious code in pp-react-ui5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee26042aed9ed8c50ffaa9b8fd40df265099c14441c38542bbfce3c529ceef3 Analysis of [email protected] 4 files surfaced no behaviors matching supply-chain attack classes: no lifecycle scripts fetching or executing remote...
Malicious code in payoutsvettingserv-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27087d7e447aae7f5009468024ead0904a706c36775c9a132b43bbcd47d3993c [email protected] declares preinstall: node index.js in package.json, causing index.js to run automatically on npm install. The script...
MAL-2026-11058 Malicious code in payoutsvettingserv-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27087d7e447aae7f5009468024ead0904a706c36775c9a132b43bbcd47d3993c [email protected] declares preinstall: node index.js in package.json, causing index.js to run automatically on npm install. The script...
GHSA-4QHR-G3C6-FCFX vulnerabilities
Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, tez, celeborn...
MAL-2026-11055 Malicious code in fundraiserservicepp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6356b654b692d4c1222f3dc31dcfad683a6e193a41484d3c617c7c8d52db2313 On npm install, the package's preinstall lifecycle executes index.js which collects os.hostname, os.platform, and os.arch and POSTs them as JSON over...
Malicious code in fundraiserservicepp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6356b654b692d4c1222f3dc31dcfad683a6e193a41484d3c617c7c8d52db2313 On npm install, the package's preinstall lifecycle executes index.js which collects os.hostname, os.platform, and os.arch and POSTs them as JSON over...
Infinite loop on invalid input in golang.org/x/text
...
CVE-2026-56817 vulnerabilities
Vulnerabilities for packages: pinot, apache-hop, tinkerpop, management-api-for-apache-cassandra-5.0, seata, pinot-fips, apache-hop-fips, hadoop-fips, thingsboard, tez, celeborn...
GHSA-88V5-9HXC-F85R vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...