CVE-2026-18612

A flaw has been found in GL-iNet GL-MT3000 up to 4.4.5. This vulnerability affects the function plugins.removepackage/plugins.installpackage of the file /cgi-bin/glc of the component plugins.so Native Plugin. This manipulation causes command injection. The attack can be initiated remotely. The...

EUVD-2026-52395

A flaw has been found in GL-iNet GL-MT3000 up to 4.4.5. This vulnerability affects the function plugins.removepackage/plugins.installpackage of the file /cgi-bin/glc of the component plugins.so Native Plugin. This manipulation causes command injection. The attack can be initiated remotely. The...

Malicious code in simple-date-formatter-util-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf71be7a588ae717e33fc9fe98c246a1037e8a38d385a18104a5c0fe8ff1f659 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11484 Malicious code in simple-date-formatter-util-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf71be7a588ae717e33fc9fe98c246a1037e8a38d385a18104a5c0fe8ff1f659 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11477 Malicious code in refbase-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 315ac36b49a01221dde71396930996c607eeef7737c9d2dafae5bdc8daf09f58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11455 Malicious code in allurectl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81cc68a7fe1c39ad33325aeb049148b1165f9d8d85c14329094de9912305e325 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11459 Malicious code in community-published (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1017256693a94381e0b07af053580670a0cd8b3e5868954aba49474d32cd8c18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11458 Malicious code in chaos-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f921c394df64d1bceae64ceeb12704fa1a6bec8e502a93507aae663647af05e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11464 Malicious code in gtm-mcp-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49a563cc12f897dc708236d0098fa2cedfeb15e249d23879b5c0e279e353604c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11471 Malicious code in maximumsats-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97f5b15159d700da1bba2acd235f675c5ef09636644f47b105ccd48648c9b845 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11481 Malicious code in sap-mcp-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29aba22b06501282c9191dcde7722b72d3d8f5f998ee0745dd99ea46eeab6fb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11456 Malicious code in attio-discover (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5820492d27701cd3054e65446532aa6542f431b1340d40e5b0332bf588dd67b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11457 Malicious code in capacitor-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b3684fbb41e490eea74489dc2453b1f37022ced6d2fba0c72a82ebbc42f4f80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11470 Malicious code in kip-mcp-http (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58ee4dff425171e92697968c9cb459175ab9826c0af98e08452458251c9c58bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11462 Malicious code in fast-csv-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca3596032239f2a982b11e2846e8af25975d77f3f7c211a32f68e5a451ead883 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11480 Malicious code in routerbase-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bcc3239685adaf9098cfcf2a9f30c0018357be5ad058caf2046534c516bc3a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11476 Malicious code in polyprompt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c83b81c4da433d42ff97456ac6c52970f52de665ee78be41fd4c4ee34705adf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11486 Malicious code in smart-npv-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c29928c7b086fd3efb53a2f1850b92a2f76f6e7e54f037fd2b87632b77208fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11467 Malicious code in iac-scanner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64524c7a0044805e503f398bf4e7f890b40bc3225a8c7576cc71ec9c8a94e378 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @goodjavascript/dotenv (npm)

@goodjavascript/[email protected] published 2025-03-22T09:05:32Z, replaced by an npm 0.0.1-security holding stub 2026-07-30T22:47:55Z — approximately 16 months live is a two-file package that impersonates the API of the widely used dotenv configuration loader while running a command-and-control implan...