40754 matches found
MAL-2026-15993 Malicious code in linkpreview-simple (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c62818bdb74e00433e1e82737807bc3c427fdcca8db39d1fff7bf6db5e7e64d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-15971 Malicious code in btn-particles (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01991d61636173b6fea5e641ca06009891d2b044b894368fab0c7610722ff070 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-15967 Malicious code in @yoannchb/wtf-json (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9479b89e13ce2a4f3327c18fc429547d79e4324efc86243c49213cae1493ea22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-15966 Malicious code in @yoannchb/tokenize (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e159c76f26df8e14cff46c6a407a3809626111597001cdecc88d7782386c8d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-15950 Malicious code in @domyjs/domy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673f8826708fe5d043b6e2cff5ed4d3acd6f71b168d6ab486d250abd0429bae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-15999 Malicious code in parallaxy-img (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3833ffd1c1a768f35c02741d1f1414ac2f76bf6c6b7eca7f3018d07becfcb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-15996 Malicious code in muswish (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 544f09e40055924b758a4908557e238acc44e86f9c63ad51548df24bfbb368a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @domyjs/collapse (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7f73041d172c7418209ef39f488365bf3b3c7a6a25e2f2d490e5e70dfcfb005 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @yoannchb/wtf-json (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9479b89e13ce2a4f3327c18fc429547d79e4324efc86243c49213cae1493ea22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in btn-particles (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01991d61636173b6fea5e641ca06009891d2b044b894368fab0c7610722ff070 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in inner-svg-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12d9bad6950b19c4869bb51e3cd490ffb6d66e4a16da9ae5d93618ac9fcb5263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in jimg (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c510cbf9c5077091b3b415ba9ce624c06a1487f6fbe3a74e638d921f8b2ec440 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in anime-vostfr (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f624a7b8a2be52c79af7942acc5717ff29fa17cec42dce635c26839deb8e06af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in parallaxy-img (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3833ffd1c1a768f35c02741d1f1414ac2f76bf6c6b7eca7f3018d07becfcb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in linkpreview-simple (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c62818bdb74e00433e1e82737807bc3c427fdcca8db39d1fff7bf6db5e7e64d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-15973 Malicious code in chrome-speech-recognition (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6595849dd7059a8fb61024bf33c2c11704cb52a784f6449cf940dc17725a0208 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16000 Malicious code in pipipe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6069e53629de29530019a5d19c7cbf7dc8d490c039130fdab2b2f264ac23728c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-15980 Malicious code in ens-namehash-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14b2ef072c91f8f3543ffbe2c1058ad379782fece91aac0f3cd1eac6a931f60f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2026-54725
vault-secrets-webhook is a Kubernetes mutating webhook that makes direct secret injection into Pods possible. Prior to 1.23.1, parseVaultConfig in pkg/webhook/config.go accepts the vault.security.banzaicloud.io/vault-addr annotation, MutateConfigMap and MutateSecret call newVaultClient in...
