KLA91386 SUI vulnerability in Microsoft Developer Tools

User interface spoofing vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2026-118147 Exploitation Related products Microsoft-Visual-Studio CVE list CVE-2026-118147 high Solution Install necessary...

@0xclearview/svelte-tiny-virtual-table (>=0.0.1, <=0.0.4), @0xkamal7/sui-agent (>=1.1.2, <=1.1.5) +3733 more potentially affected by CVE-2026-104848 via tinypool (>=0.0.3, <=2.1.0)

tinypool NPM version =0.0.3, =0.0.1, =1.1.2, =1.0.3, =0.1.0, =0.0.1, =0.1.4, =0.1.0, =15.0.0, =0.0.1, =0.2.4, =1.57.7, =1.0.0, =0.0.1, =1.0.7, =1.0.14 and more Source cves: CVE-2026-104848 Source advisory: MEND:CVE-2026-104848...

Malicious Package

Overview sui-move-gql is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview sui-move-rpc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview sui-graphql-rpc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview sui-gql-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview sui-move-graphql is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview sui-gql-rpc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious code in sui-graphql-rpc (npm)

Source: amazon-inspector ba4994f544d3df11fa82980f25dc29e379f25a3e03fdbf9a448e995a75ac76a7 On require'sui-graphql-rpc', index.js loads lib/telemetry.js which reads /.gitconfig from the installer's home directory, extracts the developer's email and name, and uses sha256identity as an AES-256-GCM ke...

Malicious code in sui-gql-rpc (npm)

Source: amazon-inspector 12074ac469d8426297f5f8bb3dd28fd48424a71348b2c16590fd4b41e4e6ad33 On require, lib/telemetry.js runs a top-level IIFE that reads the installer's /.gitconfig, extracts the configured email addresses and user name, derives an AES-256-GCM key via sha256 over that identity, and...

MAL-2026-14209 Malicious code in sui-gql-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12074ac469d8426297f5f8bb3dd28fd48424a71348b2c16590fd4b41e4e6ad33 On require, lib/telemetry.js runs a top-level IIFE that reads the installer's /.gitconfig, extracts the configured email addresses and user name,...

Malicious code in sui-gql-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12074ac469d8426297f5f8bb3dd28fd48424a71348b2c16590fd4b41e4e6ad33 On require, lib/telemetry.js runs a top-level IIFE that reads the installer's /.gitconfig, extracts the configured email addresses and user name,...

Malicious code in sui-graphql-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba4994f544d3df11fa82980f25dc29e379f25a3e03fdbf9a448e995a75ac76a7 On require'sui-graphql-rpc', index.js loads lib/telemetry.js which reads /.gitconfig from the installer's home directory, extracts the developer's...

MAL-2026-14210 Malicious code in sui-graphql-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba4994f544d3df11fa82980f25dc29e379f25a3e03fdbf9a448e995a75ac76a7 On require'sui-graphql-rpc', index.js loads lib/telemetry.js which reads /.gitconfig from the installer's home directory, extracts the developer's...

Malicious code in sui-move-gql (npm)

Source: amazon-inspector e0d32aaadd6f2f9e7febdc74278d21a613be170411c50a382228f51e47447e53 On require of the package, lib/diagnostics.js reads /.sui/sui.keystore, files under /.sui/suiconfig/, /.aws/credentials, and /.aws/config from the installer's home directory, base64-encodes them, and PUTs th...

Malicious code in sui-move-gql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d32aaadd6f2f9e7febdc74278d21a613be170411c50a382228f51e47447e53 On require of the package, lib/diagnostics.js reads /.sui/sui.keystore, files under /.sui/suiconfig/, /.aws/credentials, and /.aws/config from the...

MAL-2026-14188 Malicious code in sui-move-gql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d32aaadd6f2f9e7febdc74278d21a613be170411c50a382228f51e47447e53 On require of the package, lib/diagnostics.js reads /.sui/sui.keystore, files under /.sui/suiconfig/, /.aws/credentials, and /.aws/config from the...

Malicious code in sui-move-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760bce82610adadda6538b9ab04627b71b66c3816fe63f8e1a8f629ce4b4aaf4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malware in sui-move-graphql

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-14121 Malicious code in sui-move-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760bce82610adadda6538b9ab04627b71b66c3816fe63f8e1a8f629ce4b4aaf4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...