Malicious code in express-groups-routes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d54e03ffa96877bc24a447c0a77e5c096894fd82176e5705d62713eb5f20f10 The package express-groups-routes was found to contain malicious code. Source: ghsa-malware...

MAL-2026-712 Malicious code in ongose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1779f3d5601055650bab2b59f56ba51bc92366ccd49d815010ef67839f1257 The package ongose was found to contain malicious code. Source: ghsa-malware da279e18ef68f92cc1f02d94f9be7149d4664988f627ff7efbfcda617a237761 Any...

Malicious code in mongooose_updated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f397bd93c8a607a5fb7cb6c4da24be0ed65157020f40d778f66f4bb8f0c6237b The package mongoooseupdated was found to contain malicious code. Source: ghsa-malware c02f092aac581da5247eba7163d5bcbb065ed41865e8eeb464ea1fedd8a4d6...

MAL-2026-705 Malicious code in @devgandhi/cpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ac0fee4da2336960b7a3551c697d57364d11a28a1b4b0991d2e67d29e77299 The package @devgandhi/cpp was found to contain malicious code. Source: ghsa-malware ec9e2c8acf6e1bbf43856590ba2b792340a399ac92f20fee69d7f47843e3a58e...

Malicious code in eslint-config-stitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3747d49c7b72e1659dde0b66b3e7b95bd198fc6a8f8f37d9a7a1bc2fc76dd54 The package eslint-config-stitch was found to contain malicious code. Source: ghsa-malware...

Malicious code in tarax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b8d2d32117867326488c0c11c3433f88d30b084b30dd132f3b7a9c40c5eef4 The package tarax was found to contain malicious code. Source: ghsa-malware 2f70e23fbb33630933dc47a10dfd81d1e652f73e3ed7afe4aaee5ffc2b65afa7 Any...

Malicious code in react-responsive-carousel-v4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 544d7ca19589218beb2b384a9e4e1ce7f64b130015ea62978f81adc7c6be5934 The package react-responsive-carousel-v4 was found to contain malicious code. Source: ghsa-malware...

MAL-2026-685 Malicious code in strengthifys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26bf8b635060e35c2ba0f361186f8c6bb35d9a462ce69102a68bd12e55a6563a The package strengthifys was found to contain malicious code. Source: ghsa-malware 906876be89627ae4a5964998517da35bbfa92d6e427e4feed9b49bad03ac904e A...

Malicious code in transform-react-display-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad21ba0cb042f576642dd61d0639ac6da6cec5a468ff7b5cf0aab9164667bcb0 The package transform-react-display-name was found to contain malicious code. Source: ghsa-malware...

MAL-2026-664 Malicious code in transform-es2015-modules-amd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f874dbbcc1f45c4afb0b3b6eba5bab0a03a8f0f2749b4ad737ce8562bbd1f3b The package transform-es2015-modules-amd was found to contain malicious code. Source: ghsa-malware...

Malicious code in netlify-project-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2c95931ae7b5a6c572ebecb2cd096bd4cef37bcf61a440cbb2338062f4a836 The package netlify-project-helper was found to contain malicious code. Source: ghsa-malware...

Malicious code in dns-troubleshoot-toolkit-xyz123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d7149f6ef706cf3aa58e9dbf0b206aec334710d6d960fc3d1336f7b67bd56e The package dns-troubleshoot-toolkit-xyz123 was found to contain malicious code. Source: ghsa-malware...

Malicious code in researchpoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee8d68b9386bf55de2d3ed033493507ee88db166ae46345172ba93d938f3a27 The package researchpoc was found to contain malicious code. Source: ghsa-malware 912631f8dc76f3b4ddae075966fd902e7ab19c0799a0cd29b0c9ece7d79cd1ce An...

Linux Distros Unpatched Vulnerability : CVE-2026-1035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Keycloak server during refresh token processing, specifically in the TokenManager class responsible for enforcing refresh token reuse...

MAL-2026-646 Malicious code in picking-miniapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65c40c2b2607ac2d8df224c24ff7fcc349a20993fadc53e544289d10a24a510 The package picking-miniapp was found to contain malicious code. Source: ghsa-malware 0d2a7046f9c602dfce90cc2c44cbbd8c7d8c9749929258f31e30fa899794e23...

Malicious code in dise-pkt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02da19d128c79fa9465ba506ff8f53abb3ef541a1da253174255be017c9fd97 The package dise-pkt was found to contain malicious code. Source: ghsa-malware 58b8c2811e173e83d76597b5cb08d80de79cbc72396b7ba7957ed6c15a6003a2 Any...

MAL-2026-645 Malicious code in libsignal-yazxzpedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae9ba3f94d59737d6d94cdf9e7fc825a792d62a213daba9d5b778e56ac35d459 The package libsignal-yazxzpedia was found to contain malicious code. Source: ghsa-malware...

Malicious code in jwt-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4102b59becb214e216d479ce014231e41dd264560b48ef7750c7006a3c86e7d6 The package jwt-pack was found to contain malicious code. Source: ghsa-malware c16aba10441aad949bd96fd2a349f2f59d62bf56708394fd925b432c57e2c91b Any...

CVE-2025-12810

Improper Authentication vulnerability in Delinea Inc. Secret Server On-Prem RPC Password Rotation modules.This issue affects Secret Server On-Prem: 11.8.1, 11.9.6, 11.9.25. A secret with "change password on check in" enabled automatically checks in even when the password change fails after reachi...

MAL-2026-591 Malicious code in kol7a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81ab7bff0ce4494ac98d492444f18a8ec22e0d34f4cbaa30314de910b6a1039 The package kol7a was found to contain malicious code. Source: ghsa-malware 34930716d17313165d83a1830db1542583fbd4c6e6cf873c66cb3dfb5fbfb336 Any...