MAL-2026-15489 Malicious code in borsh-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed0e447cd98b9470a197c1dd9b341e6a93ea6f39088f4f93335979827f707b8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-82282

Atlantis (through version 0.47.1 ) contains an authentication bypass in the /github-app/setup endpoint. The endpoint fails to require authentication, allowing unauthenticated callers to observe or intercept the GitHub redirect during app setup and extract the RSA private key and webhook secret . ...

EUVD-2026-67813

Atlantis through 0.47.1 fails to authenticate the /github-app/setup endpoint, allowing unauthenticated attackers to access GitHub App credentials. Attackers can observe or intercept the GitHub redirect during setup to obtain the RSA private key and webhook secret, enabling installation token...

CVE-2026-82282 Atlantis GitHub App Setup Endpoint Returns App Credentials to Unauthenticated Callers

Atlantis through 0.47.1 fails to authenticate the /github-app/setup endpoint, allowing unauthenticated attackers to access GitHub App credentials. Attackers can observe or intercept the GitHub redirect during setup to obtain the RSA private key and webhook secret, enabling installation token...

Malicious code in 3layerdipstackev4sn5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17ef62f686ec1ac60f240ece02aa6d2518e472ae1d59f9b760e783cdcfa48ee The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackesp1lb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd59b0798d5b504ce5bc151f4b845c732a5cbf45d046f54b3becbffd944cd38 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14743 Malicious code in 3layerdipstackesp1lb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd59b0798d5b504ce5bc151f4b845c732a5cbf45d046f54b3becbffd944cd38 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackulgnp8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e41ab8004671490e003371ef18f1b5b568f6446e3f559b423a8ce16303419a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14872 Malicious code in 3layerdipstackpcv17m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 341115d5cb8bd44ffcf82bc4d8d35f995473df6f24abccb910c9c16fb70cea36 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14745 Malicious code in 3layerdipstackev4sn5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17ef62f686ec1ac60f240ece02aa6d2518e472ae1d59f9b760e783cdcfa48ee The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14949 Malicious code in 3layerdipstackulgnp8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e41ab8004671490e003371ef18f1b5b568f6446e3f559b423a8ce16303419a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14909 Malicious code in 3layerdipstackru7mfn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0881c571357484f968c509c3f05f0e3c49536125c0a71c5dc7e1efae558ef109 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14774 Malicious code in 3layerdipstackhr3ocw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7f5462a6cad4608977cbf01ae1fab24a1257afe36d254ce404ca49b5aab99c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14929 Malicious code in 3layerdipstacktfieac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf372a98946f7fce4deb5f9315c4755a76a5cca6d65bcdc0922607134098308 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackr5ga2v (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ce455e7a19e84189c13631dc62f53159d44c67920b1579ab3feb779614bcb6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackvnmth1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7533d9ea537e10b7659ca2afbdbc1ddcf6dc33d53dab9a053336ac8855e8aa32 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackvcdkrp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e942d987e7abce19624bf16a6e376f8a607a87d963d8838737e7b923b0ab4b92 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackl52afz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc19f591ccfb749d65cefcaebd3e42ed6f60920bd2318c21ba12450fe8ed3162 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackkzelo0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe6fd3906f3e7fba969331ad81704c13688f502badb2bffcfd851ea79d99999 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack2pdlo4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638e723511590669eefd908d7c0ae0c5cfae12a68a2599986d8aa853f09006c7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...