Malicious Package

Overview tailwind-text-fill is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview tailwindthml-flips is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview npm-doc-deploy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @tushar-br/editing-pack is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious Package

Overview @tushar-br/file11 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview krdfonts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview mailcraftjs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview @kjma/mailcraft is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview turbo-he is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview turbo-leven is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

CVE-2026-26399

A stack-use-after-return issue exists in the ArduinoCoreSTM32 library prior to version 1.7.0. The pwmstart function allocates a TIMHandleTypeDef structure on the stack and passes its address to HAL initialization routines, where it is stored in a global timer handle registry. After the function...

GHSA-C3FC-8QFF-9HWX vulnerabilities

Vulnerabilities for packages: ruby3.3-bouncy-castle-java, apache-nifi, apache-pulsar, thingsboard, sonarqube, keycloak, jruby, gradle, jenkins, ruby3.4-bouncy-castle-java, apache-nifi-registry, spark, logstash, kserve-modelmesh, druid, ruby4.0-bouncy-castle-java, ruby3.2-bouncy-castle-java, zipki...

CVE-2026-0636 vulnerabilities

Vulnerabilities for packages: ruby3.3-bouncy-castle-java, apache-nifi, apache-pulsar, thingsboard, sonarqube, keycloak, jruby, gradle, jenkins, ruby3.4-bouncy-castle-java, apache-nifi-registry, spark, logstash, kserve-modelmesh, druid, ruby4.0-bouncy-castle-java, ruby3.2-bouncy-castle-java, zipki...

CVE-2026-3505 vulnerabilities

Vulnerabilities for packages: apache-nifi, gradle, jenkins, apache-nifi-registry, wildfly...

GHSA-CJ8J-37RH-8475 vulnerabilities

Vulnerabilities for packages: apache-nifi, gradle, jenkins, apache-nifi-registry, wildfly...

GHSA-CJ8J-37RH-8475 vulnerabilities

Vulnerabilities for packages: gradle, jenkins, wildfly, apache-nifi-registry, apache-nifi...

CVE-2026-3505 vulnerabilities

Vulnerabilities for packages: gradle, jenkins, wildfly, apache-nifi-registry, apache-nifi...

GHSA-WG6Q-6289-32HP vulnerabilities

Vulnerabilities for packages: jruby, apache-nifi, logstash, apache-pulsar, kserve-modelmesh, thingsboard, jenkins, druid, zipkin, apache-nifi-registry, sonarqube, wildfly, keycloak...

CVE-2026-5588 vulnerabilities

Vulnerabilities for packages: jruby, apache-nifi, logstash, apache-pulsar, kserve-modelmesh, thingsboard, jenkins, druid, zipkin, apache-nifi-registry, sonarqube, wildfly, keycloak...

Malicious Package

Overview @than1st/baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...