CVE-2026-31971

creationtimestamp| type| source ---|---|--- 2026-03-18 19:16:22+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-31971 2026-03-19 21:57:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgynklxyg2v...

CVE-2026-31969

creationtimestamp| type| source ---|---|--- 2026-03-18 19:16:21+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-31969 2026-03-19 21:58:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgyq6krhy25...

CVE-2026-31966

creationtimestamp| type| source ---|---|--- 2026-03-18 19:16:21+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-31966 2026-03-19 21:57:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgynrgeln2t...

CVE-2026-31967

creationtimestamp| type| source ---|---|--- 2026-03-18 19:16:21+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-31967 2026-03-19 21:58:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgypr2pp32c...

CVE-2026-1463

creationtimestamp| type| source ---|---|--- 2026-03-18 17:28:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhdz6cvhad2c...

OneUptime WhatsApp Webhook Missing Signature Verification

Summary The WhatsApp POST webhook handler /notification/whatsapp/webhook processes incoming status update events without verifying the Meta/WhatsApp X-Hub-Signature-256 HMAC signature, allowing any unauthenticated attacker to send forged webhook payloads that manipulate notification delivery stat...

MAL-2026-1856 Malicious code in static-content-cannabis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad874c892146b9bd12da1a27cfcf9bb790ac0fa7f7e82c795585e7343806eb1b The package static-content-cannabis was found to contain malicious code...

MAL-2026-1842 Malicious code in sheinx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 491bd46d3cc55fb18d3343ede29a51034a964051c1fd6a6ad8cf709fe18fac83 The package sheinx was found to contain malicious code...

MAL-2026-1835 Malicious code in react-fast-utilsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95853c89c144cd1630b70c6d2c5e97e8b3cafd6d8ff628b357c80d6a7f8407b5 The package react-fast-utilsa was found to contain malicious code...

Malicious code in metro-evaluator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e35441f182ca0b66905b74b51c0db61c1d641d7ecc920cdfef2ddedff38dda The package metro-evaluator was found to contain malicious code...

MAL-2026-1789 Malicious code in loyalty-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae7127001e7050600c6ccf6afcc74aa672cb2fed26f21f1f25145c9027ac7f9f The package loyalty-card was found to contain malicious code...

MAL-2026-1773 Malicious code in libxmljs13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38dafad617301c1edf5722feddd7023a1e39feb06be970b19e713e38d0038ff7 The package libxmljs13 was found to contain malicious code...

MAL-2026-1772 Malicious code in libxmljs12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ee7e3fb53b96ddcd2961ae800b9d761e4c39ff53bcf5894200f41d12fa88942 The package libxmljs12 was found to contain malicious code...

MAL-2026-1737 Malicious code in fe-lib-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc3834e7b034601a3ed7f032e0575770c41742c9f13761e0e79ced9c7893af86 The package fe-lib-theme was found to contain malicious code...

MAL-2026-1721 Malicious code in ehance-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128d207ed08094b4cb1eb4e4cd448c7158c3896b8d4ec486c92790407adc99b5 The package ehance-assistant was found to contain malicious code...

Malicious code in dstny (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f626d298a9c4cfb632526a78be22b6af5d196ba9b736ecfe9eab8daa2df73e99 The package dstny was found to contain malicious code...

MAL-2026-1716 Malicious code in dotenv-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1892dd92715cddb9d2bc58111d6b2e4352677ff4d6b155ed7ddc9e04f06edf The package dotenv-plugin was found to contain malicious code...

MAL-2026-1711 Malicious code in dotenv-int (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff3b8c2dda09766587481490c9be74a1af10a9660698a8f7b8f31a7df47bc96 The package dotenv-int was found to contain malicious code...

Malicious code in dataterminal-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5edeeb534b27862802b775a378680a4755cccb09d13481c4525f63821bd81d The package dataterminal-ui was found to contain malicious code...

Malicious code in chain-cli-promised (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7e399daf13fda688fc1a6bb911c0bf7582ef52fff3eb5af58fbd8c0934b88a The package chain-cli-promised was found to contain malicious code...