MAL-2026-11915 Malicious code in @servicetitan/restrict-imports (npm)

npm/@servicetitan/restrict-imports is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @servicetitan/restrict-imports (npm)

npm/@servicetitan/restrict-imports is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious Package

Overview restrict-imports is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-1353 Malicious code in restrict-imports (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82360676317e6d9c2b69a82034af73f2008890871348fb45bc5b966f6aca03c The package restrict-imports was found to contain malicious code. Source: ghsa-malware e153e68a84a468be42de7a7c49af2d4e73778f4462d854be60a6e8baf03105...

Malicious code in restrict-imports (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82360676317e6d9c2b69a82034af73f2008890871348fb45bc5b966f6aca03c The package restrict-imports was found to contain malicious code. Source: ghsa-malware e153e68a84a468be42de7a7c49af2d4e73778f4462d854be60a6e8baf03105...

PT-2024-38774 · Progress · Telerik Document Processing Libraries

Name of the Vulnerable Software and Affected Versions: Progress Telerik Document Processing Libraries versions prior to 2024 Q4 2024.4.1106 Description: The issue arises when importing a document with unsupported features, leading to excessive processing and excessive use of computing resources...

PT-2024-31725 · Assimp +2 · Assimp +2

Name of the Vulnerable Software and Affected Versions: Assimp versions prior to 5.4.3 Description: A heap-based buffer overflow issue allows a local attacker to execute arbitrary code by importing a specially crafted file into the product. This can be achieved through the import functionality of...

PT-2024-37999 · H2O · H2O

Name of the Vulnerable Software and Affected Versions: H2O versions prior to 3.38.0 Description: The H2O machine learning platform uses "Iced" classes to move Java objects around the cluster, which supports the inclusion of serialized Java objects. When a model is deserialized, any class is allow...