EUVD-2026-67813

Atlantis through 0.47.1 fails to authenticate the /github-app/setup endpoint, allowing unauthenticated attackers to access GitHub App credentials. Attackers can observe or intercept the GitHub redirect during setup to obtain the RSA private key and webhook secret, enabling installation token...

CVE-2026-82282

Atlantis (through version 0.47.1 ) contains an authentication bypass in the /github-app/setup endpoint. The endpoint fails to require authentication, allowing unauthenticated callers to observe or intercept the GitHub redirect during app setup and extract the RSA private key and webhook secret . ...

CVE-2026-82282 Atlantis GitHub App Setup Endpoint Returns App Credentials to Unauthenticated Callers

Atlantis through 0.47.1 fails to authenticate the /github-app/setup endpoint, allowing unauthenticated attackers to access GitHub App credentials. Attackers can observe or intercept the GitHub redirect during setup to obtain the RSA private key and webhook secret, enabling installation token...

Malicious code in 3layerdipstackev4sn5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17ef62f686ec1ac60f240ece02aa6d2518e472ae1d59f9b760e783cdcfa48ee The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackesp1lb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd59b0798d5b504ce5bc151f4b845c732a5cbf45d046f54b3becbffd944cd38 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackulgnp8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e41ab8004671490e003371ef18f1b5b568f6446e3f559b423a8ce16303419a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14909 Malicious code in 3layerdipstackru7mfn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0881c571357484f968c509c3f05f0e3c49536125c0a71c5dc7e1efae558ef109 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14949 Malicious code in 3layerdipstackulgnp8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e41ab8004671490e003371ef18f1b5b568f6446e3f559b423a8ce16303419a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14745 Malicious code in 3layerdipstackev4sn5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17ef62f686ec1ac60f240ece02aa6d2518e472ae1d59f9b760e783cdcfa48ee The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14872 Malicious code in 3layerdipstackpcv17m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 341115d5cb8bd44ffcf82bc4d8d35f995473df6f24abccb910c9c16fb70cea36 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14743 Malicious code in 3layerdipstackesp1lb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd59b0798d5b504ce5bc151f4b845c732a5cbf45d046f54b3becbffd944cd38 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14929 Malicious code in 3layerdipstacktfieac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf372a98946f7fce4deb5f9315c4755a76a5cca6d65bcdc0922607134098308 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14774 Malicious code in 3layerdipstackhr3ocw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7f5462a6cad4608977cbf01ae1fab24a1257afe36d254ce404ca49b5aab99c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackkzelo0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe6fd3906f3e7fba969331ad81704c13688f502badb2bffcfd851ea79d99999 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackvnmth1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7533d9ea537e10b7659ca2afbdbc1ddcf6dc33d53dab9a053336ac8855e8aa32 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack8lj8gm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72671b2191d5c2a662d2b435a09fa42f2bbc26997aea63f216ac6a8a81779076 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackhcymwm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f9ceeb1377cded900160b5cde819d2490edebf76264bed649b7ccec5cb013f7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackuyd45d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b49a0c197bc8d1d72c142586ce6a7b4c6a6694574fb33ced9f7a770f046bae The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack1lkqg9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3055362817a22386f2c0e5db959db42444b9c60d620c9c8453ee196a1d0e8fe The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackr5ga2v (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ce455e7a19e84189c13631dc62f53159d44c67920b1579ab3feb779614bcb6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...