113 matches found
MAL-2026-16319 Malicious code in @dbbhk/ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478839dda68d2c5eefa1a55557602d4b12396c988211b28d785af531d0b19d07 @dbbhk/[email protected] declares both preinstall and postinstall hooks in package.json that execute node callback.js, so the payload runs...
ROS-20260914-73-0121
The vulnerability of the UI components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
ROS-20260909-73-0149
The vulnerability of the UI components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the UI components in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the UI components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
MAL-2026-11661 Malicious code in @onereach/ui-components-common (npm)
npm/@onereach/ui-components-common is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11605 Malicious code in @onereach/idw-ui-components (npm)
npm/@onereach/idw-ui-components is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
@myrtex-org/ui (>=1.0.1, <=1.2.10), @rosgrant-org/ui (>=1.0.1, <=1.0.4) +3 more potentially affected by CVE-2026-62324 via jodit (>=4.0.18, <=4.3.2)
jodit NPM version =4.0.18, =1.0.1, =1.0.1, =0.41.1, =2.0.0-alpha.2, =17.0.70, =17.2.9 Source cves: CVE-2026-62324 Source advisory: OSV:GHSA-J839-GQQ4-GF9J...
Malicious code in @athena-ui-components/utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7049 Malicious code in @athena-ui-components/utils (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @athena-ui-components/pubsub-bridge (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @athena-ui-components/user-activity (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7047 Malicious code in @athena-ui-components/pubsub-bridge (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7048 Malicious code in @athena-ui-components/user-activity (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7046 Malicious code in @athena-ui-components/layout (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @athena-ui-components/hooks (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7044 Malicious code in @athena-ui-components/hooks (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @athena-ui-components/lang (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7045 Malicious code in @athena-ui-components/lang (npm)
--- -= Per source details. Do not edit below this line.=-...