Malicious Package

Overview @ikyyjee/ikkysingle is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @queenanya/baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @bellaxchuu/flowblue is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview cleanup-string is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

ROOT-APP-NPM-CVE-2026-22709 CVE-2026-22709 in vm2 - Patched by Root

Root has patched CVE-2026-22709 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47131 CVE-2026-47131 in vm2 - Patched by Root

Root has patched CVE-2026-47131 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-32314 CVE-2023-32314 in vm2 - Patched by Root

Root has patched CVE-2023-32314 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47208 CVE-2026-47208 in vm2 - Patched by Root

Root has patched CVE-2026-47208 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-37903 CVE-2023-37903 in vm2 - Patched by Root

Root has patched CVE-2023-37903 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47137 CVE-2026-47137 in vm2 - Patched by Root

Root has patched CVE-2026-47137 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-37466 CVE-2023-37466 in vm2 - Patched by Root

Root has patched CVE-2023-37466 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-26956 CVE-2026-26956 in vm2 - Patched by Root

Root has patched CVE-2026-26956 in the vm2 package for Root:npm. Multiple fixed versions available...

MAL-2026-17310 Malicious code in tailwind-forms-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1083ea1ddf83f29a443e7ba4b24db0d24da35dfd0a9d0ac032ae20501ac57ea npm package [email protected] impersonates the @tailwindcss/forms plugin: the package.json name field is ' tailwind-forms-kit' with a leading...

CLEANSTART-2026-HJ64426 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the tempo package. gRPC-Go is the Go language implementation of gRPC...

CLEANSTART-2026-BY71452 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the tempo package. gRPC-Go is the Go language implementation of gRPC...

AlmaLinux 9.6 [TuxCare] Security Update: git-lfs (ALMALINUX9.6:CLSA-2026:1782991913)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782991913 advisory. - The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII- only label. For example,...

AlmaLinux 9.6 [TuxCare] Security Update: ignition / ignition-edge / ignition-grub / ignition-validate (ALMALINUX9.6:CLSA-2026:1789376503)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789376503 advisory. - The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII- only label. For example,...

AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.2:CLSA-2026:1784533387)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784533387 advisory. - The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII- only label. For example,...

Rocky Linux 9.6 [TuxCare] Security Update: ignition / ignition-edge / ignition-grub / ignition-validate (ALMALINUX9.6:CLSA-2026:1789376503)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789376503 advisory. - The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII- only label. For example,...

AlmaLinux 9.2 [TuxCare] Security Update: grafana (ALMALINUX9.2:CLSA-2026:1784074875)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784074875 advisory. - The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII- only label. For example,...