@whalent/agent (0.3.275) potentially affected by unknown CVE via @whalent/agent-core (0.3.275)

@whalent/agent-core NPM version 0.3.275 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.275 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

MAL-2026-10722 Malicious code in @whalent/agent-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8865ae7d25a498766280337f12ceea445a92bd6a6565e668651a79dbcc152e9 The package's main/bin entry dist/index.cjs implements a remote agent that opens a WebSocket to a gateway configured via WHALENTGATEWAY / WHALENTTOKE...

@whalent/agent (0.3.296) potentially affected by unknown CVE via @whalent/agent-core (0.3.296)

@whalent/agent-core NPM version 0.3.296 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.296 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.235) potentially affected by unknown CVE via @whalent/agent-core (0.3.235)

@whalent/agent-core NPM version 0.3.235 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.235 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.241) potentially affected by unknown CVE via @whalent/agent-core (0.3.241)

@whalent/agent-core NPM version 0.3.241 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.241 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.251) potentially affected by unknown CVE via @whalent/agent-core (0.3.251)

@whalent/agent-core NPM version 0.3.251 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.251 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.253) potentially affected by unknown CVE via @whalent/agent-core (0.3.253)

@whalent/agent-core NPM version 0.3.253 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.253 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.259) potentially affected by unknown CVE via @whalent/agent-core (0.3.259)

@whalent/agent-core NPM version 0.3.259 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.259 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.279) potentially affected by unknown CVE via @whalent/agent-core (0.3.279)

@whalent/agent-core NPM version 0.3.279 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.279 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.239) potentially affected by unknown CVE via @whalent/agent-core (0.3.239)

@whalent/agent-core NPM version 0.3.239 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.239 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.255) potentially affected by unknown CVE via @whalent/agent-core (0.3.255)

@whalent/agent-core NPM version 0.3.255 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.255 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.262) potentially affected by unknown CVE via @whalent/agent-core (0.3.262)

@whalent/agent-core NPM version 0.3.262 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.262 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.266) potentially affected by unknown CVE via @whalent/agent-core (0.3.266)

@whalent/agent-core NPM version 0.3.266 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.266 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.276) potentially affected by unknown CVE via @whalent/agent-core (0.3.276)

@whalent/agent-core NPM version 0.3.276 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.276 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.278) potentially affected by unknown CVE via @whalent/agent-core (0.3.278)

@whalent/agent-core NPM version 0.3.278 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.278 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.295) potentially affected by unknown CVE via @whalent/agent-core (0.3.295)

@whalent/agent-core NPM version 0.3.295 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.295 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

MAL-2026-10741 Malicious code in netcontrol-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967b375e5686bd1eab74838f00cd21c2a8e15291f03a8140b494a83052fd2a92 netcontrol-agent.js implements a remote agent that long-polls a configured server URL and pipes the returned bytes directly into an interactive shell...

MAL-2026-10751 Malicious code in vanexa-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ea182e48a895e218d345ca6308727223e54eb285d9af44a167b6b115ba1a907 When the user runs vanexa-agent start, the daemon opens a persistent WebSocket to a hardcoded Cloudflare Workers relay at...

Malicious code in vanexa-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ea182e48a895e218d345ca6308727223e54eb285d9af44a167b6b115ba1a907 When the user runs vanexa-agent start, the daemon opens a persistent WebSocket to a hardcoded Cloudflare Workers relay at...

@funny-booth/devagent (>=0.1.0, <=0.1.1), @funny-booth/keieiagent (0.1.0) +2 more potentially affected by unknown CVE via @funny-booth/agent-core (0.1.9)

@funny-booth/agent-core NPM version 0.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on @funny-booth/agent-core and may be impacted: - @funny-booth/devagent =0.1.0, =0.1.1 - @funny-booth/keieiagent 0.1.0 - @funny-booth/personawrite 0.1.0 -...