nah

expensive mistakes stop here a guard that blocks catastrophic agent actions nahguard.ai • what it blocks • how it decides • install • extend • threat model claude code · codex · cursor · pi · + 11 more nah is a guard that sits in your coding agent's hook path and reads tool calls before they run...

@Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft

Summary Mockoon's admin API commons-server/src/libs/server/admin-api.ts is mounted on the same Express listener as the user-defined mock routes, enabled by default in every shipped runtime commons-server, CLI, serverless, serves Access-Control-Allow-Origin: on every endpoint with all HTTP methods...

Malicious code in graphql-js-client-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c11b1672f9929aa10893cab85bc0f4e9a5ae5adfc2c8ae637d45e61b644692b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-77968 Hawtio-operator: hawtio-operator: cluster-wide secrets read/write granted to operator serviceaccount

A flaw was found in hawtio-operator. The operator's ClusterRole grants secrets: create, get, list, update, watch across all namespaces. While the operator uses a controller-runtime label-selector cache as a memory optimization, the ServiceAccount token authorizes read access to every Secret in th...

Malicious code in @web2apk/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad4c3329ebb2fdeb3b9ddc93abcb5f3dab6773f7a7999ff96d063d49edc04d9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16036 Malicious code in redis-type-intel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6f84d412afce72584ec95c5e2595987bf307b67540da51870c8a3a22b05952 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in oscar-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c988ef2dab3264cefcab98e4aae196d6c45b5555b22641e5862d89bde83815b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in btree-leaderboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ceaaf14d642f02835e10e1eb7de05ea911ecf2b72bc354305aa3d6bf874e4e4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in onceaction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52acfee73c36f7df40ac54204cef235483203b7dec9208d5b219cb7068d341f1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15843 Malicious code in is-generator-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93931fecef2da94abf1de73e282da2c510715512d61bfe8afd1197925f4b6e08 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

nah v1.4.0

expensive mistakes stop here a guard that blocks catastrophic agent actions nahguard.ai • what it blocks • how it decides • install • extend • threat model claude code · codex · cursor · pi · + 11 more nah is a guard that sits in your coding agent's hook path and reads tool calls before they run...

Malicious code in @viertechjs/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e369cb173ca8757829b6cb54f1d3e63c8b8baacb1f22241092a5a1032779d3c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15668 Malicious code in core_main (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e64170304c1f55aeeca3c096c224c5fe6301dafbd331bb943d08fc1a4bf0588f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in h3-codex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efe15c8b6a625f5ec662fc1d19f3191d0c9cd4a118565283dbe7ac9be1f54a7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in quesoeducation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c428c1658948c78d2e7323de16bf1f37dced0bcd770cd73fd2b3c0855f6aa7b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackulgnp8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e41ab8004671490e003371ef18f1b5b568f6446e3f559b423a8ce16303419a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14735 Malicious code in 3layerdipstackebunld (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f35c1ab7d5caca68709f53e4437e5bbdf3a77fb308628c4517a0798c04fa508 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14974 Malicious code in 3layerdipstackwqo67k (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 864e56b4902469edeaaf89c3ccec9f8889b63aa7a0c23f00419542deceeaad86 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14879 Malicious code in 3layerdipstackposh4n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e285d6a749b37b4af081400d21c2d65c9b6cca18c85df585f033c079b4576cd0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14798 Malicious code in 3layerdipstackkdz8gp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368b8b3b78737f70c40d63c50e4b3781efe89e947013fd02af154faeca9c7ef0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...