44381 matches found
MAL-2026-11393 Malicious code in tailwindcssss (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0da18df9b0c152f27cf8431c3ac342f3dd15d7a94ade13a40a7ee7dfcba1614d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11302 Malicious code in expres.js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e2eb125cd826b1578646fdd06af4c5649ab6b31c1a39afc768bbc62bfdae0d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11258 Malicious code in chalk-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ece655dd7e91fffbda3bf623e600cd48eab1155796c4752237a2911887d1d456 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11404 Malicious code in ttest333 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b74ff57fa83801c9d727f00ead8619c39184c324bf8c82a1f34c7871154afe76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in raydiums (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3fbaa5dc6f9b4df46fcb491e1a31924b028376844d5678688289fbae08b7099 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11407 Malicious code in uniswapintefrace (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cd5488070442a7d4759895cd6b5243add2626b095f5da7cb1c08611c396e605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in base-x-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02b128e2527188695a34b319908cae8e30d328c4ac38be36cdbb0957af15e443 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dash-merge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 533b218de7d9e1e925383f5f75cd29a4a2b6869e3d9a104907d4b0d133875a37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11281 Malicious code in dotenv-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7926abbca35dd3e5fa6c841ddff70fda3bc8330d2e427fe5747a23c264a4f45e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-12562
CVE-2026-12562 affects Toptech Systems RCU II+ and Multiload II+ devices. A network-accessible port runs a Target Communications Framework (TCF) service that does not require authentication, exposing a debug interface that grants full root access to the embedded Linux environment. An unauthentica...
MAL-2026-11350 Malicious code in pulleeelll (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b3173a308b5738e4e3047a8125b432486042563101678e0182e95962b37f20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in d3-bbox (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f44d2af489d00e9c5d4afb273874098491e2b6dcf362489ca10229f337a21005 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in live-reload-on-error (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b7d87f94e77b603423e5ebb9e62f37541ad355708d900e33e0442210ce70957 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11380 Malicious code in slowest-build-nodes (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99f289163f5b86c32755596d6994cdf618b497111e781d5ab034d64d248d6b4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in pullingpackageeeeeeeeeee (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa6e0b845a57f0b93fc4c94f5fcd848ad4208ef9c5043784b3f36b00baae782d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in pullingpackagee (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d72c36e7d1f592e7ea21cc7aaf3ae10e22eca202c7b2ae7e3cab34f08a5ea32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in pullingpackageeeeeeeeee (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f91dfa4ff998df4408f931ab845cd0e8ee28ea87257ee5e16a9193be3182e851 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11360 Malicious code in pullingpackageeeeeeeeeee (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa6e0b845a57f0b93fc4c94f5fcd848ad4208ef9c5043784b3f36b00baae782d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11375 Malicious code in rumjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb5296e68a31e1b0b076ac2f39cf7ab597f90a4582ff9072395f0b57834ed6d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
