Malicious code in z-shop-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ac6f0b86a348586f517ef591a8fa3dd2ffffd919bcc1f6cfce912d06cba4aa5 The package z-shop-ui was found to contain malicious code. Source: ghsa-malware 7d3e42fd3ceecf78bbc9a794a0a36c38485ab8e91fe9892ffbd9c1db7f2a0fa0 Any...

Malicious Package

Overview z-shop-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-728 Malicious code in z-shop-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ac6f0b86a348586f517ef591a8fa3dd2ffffd919bcc1f6cfce912d06cba4aa5 The package z-shop-ui was found to contain malicious code. Source: ghsa-malware 7d3e42fd3ceecf78bbc9a794a0a36c38485ab8e91fe9892ffbd9c1db7f2a0fa0 Any...

GHSA-MHF6-PP52-8WQJ Moodle Cross-site Scripting (XSS) vulnerability

A flaw was found in Moodle. This Cross-site Scripting XSS vulnerability, caused by improper sanitization of AI prompt responses, allows attackers to inject malicious HTML or script into web pages. When other users view these compromised pages, their sessions could be stolen, or the user interface...

Malicious code in @uselagoon/ui-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda12522a61c5fdbf5675903128a573bb6dcf1bd1aee45a1340877450fb2112f The package @uselagoon/ui-library was found to contain malicious code. Source: ghsa-malware...

MAL-2026-687 Malicious code in @uselagoon/ui-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda12522a61c5fdbf5675903128a573bb6dcf1bd1aee45a1340877450fb2112f The package @uselagoon/ui-library was found to contain malicious code. Source: ghsa-malware...

MAL-2026-679 Malicious code in epic-admin-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53764f149897a5c5d4373d2f217da3994123f2664db8150cfcf37b474ee632db The package epic-admin-ui was found to contain malicious code. Source: ghsa-malware 34cc1c893e75c3b3e5849e74fed6d7f75ce784c9e933d878d93e773fae313305...

Malicious code in epic-admin-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53764f149897a5c5d4373d2f217da3994123f2664db8150cfcf37b474ee632db The package epic-admin-ui was found to contain malicious code. Source: ghsa-malware 34cc1c893e75c3b3e5849e74fed6d7f75ce784c9e933d878d93e773fae313305...

MAL-2026-669 Malicious code in vite-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dde7d42b0bc5236d827ba62c883fbf14b643e368ef8a4b0f7b5430a35183254 The package vite-ui-components was found to contain malicious code. Source: ghsa-malware...

Malicious code in vite-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dde7d42b0bc5236d827ba62c883fbf14b643e368ef8a4b0f7b5430a35183254 The package vite-ui-components was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview vite-ui-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-658 Malicious code in ansi-universal-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa5e839c2761f91f4d422c6c89799495ba4a3171731ecac75e00647bbf95904 The package ansi-universal-ui was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview ansi-universal-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in ansi-universal-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa5e839c2761f91f4d422c6c89799495ba4a3171731ecac75e00647bbf95904 The package ansi-universal-ui was found to contain malicious code. Source: ghsa-malware...

PT-2026-5959

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description A flaw exists in Moodle due to improper sanitization of AI prompt responses. This allows attackers to inject malicious HTML or script into web pages. Successful exploitation could lead to...

Google Chrome < 104.0.5112.102 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 104.0.5112.102. It is, therefore, affected by multiple vulnerabilities as referenced in the 202208stable-channel-update-for-desktop16 advisory. - Use after free in Browser Creation in Google Chrome prior to 104.0.5112.1...

Fedora 43 : openttd (2026-dd8314c4f3)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-dd8314c4f3 advisory. 15.x 15.1 2026-01-24 - Fix 15088: When building a new train, the refit button state may be incorrect 15162 - Fix 15160: Incorrect company names displayed in...

CVE-2025-36436 Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.

IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 007 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web...

@firedesktop/react-portal-base (2.1.2), @imaginario27/air-ui-utils (>=1.0.8, <=1.0.9) +4 more potentially affected by CVE-2026-24737 via jspdf (4.0.0)

jspdf NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jspdf and may be impacted: - @firedesktop/react-portal-base 2.1.2 - @imaginario27/air-ui-utils =1.0.8, =1.4.0-I18n-QM, =0.5.129, =4.4.0, =4.4.1 - svgedit 7.4.1 Source cves:...

PT-2026-31500

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description A flaw in Google Chrome's fullscreen mode allowed an attacker to perform UI spoofing using a specially crafted HTML page. This could potentially trick users into interacting with a fake...