ca.islandora.alpaca:islandora-alpaca-app (>=2.0.0 <=2.2.0), ca.islandora.alpaca:islandora-connector-derivative (>=2.0.0 <=2.2.0) +82 more potentially affected by CVE-2026-40453 via org.apache.camel:camel-jms (>=3.0.0-M1 <=4.14.5)

org.apache.camel:camel-jms MAVEN version =3.0.0-M1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =3.0.0, =0.46, =0.3, =0.5, =0.1, =0.1, =1.0, =4.3.7.hyte-4307a, =4.3.7.hyte-4307a, =hyte-mq-4.3.7.hyte-43072 and more Source cves: CVE-2026-40453 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-16321636...

ca.islandora.alpaca:islandora-alpaca-app (>=2.0.0 <=2.2.0), ca.islandora.alpaca:islandora-connector-derivative (>=2.0.0 <=2.2.0) +82 more potentially affected by CVE-2026-40860 via org.apache.camel:camel-jms (>=3.0.0-M1 <=4.14.6)

org.apache.camel:camel-jms MAVEN version =3.0.0-M1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =3.0.0, =0.46, =0.3, =0.5, =0.1, =0.1, =1.0, =4.3.7.hyte-4307a, =4.3.7.hyte-4307a, =hyte-mq-4.3.7.hyte-43072 and more Source cves: CVE-2026-40860 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-16321536...

BIT-NGINX-GATEWAY-2021-3618

ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic fr...

EUVD-2025-117161

Malicious code in private-violet-alpaca npm...

EUVD-2025-104082

Malicious code in littlealpacaz3n npm...

EUVD-2025-103395

Malicious code in obedientalpacaz3n npm...

EUVD-2025-106346

Malicious code in boredalpacaz3n npm...

EUVD-2025-106244

Malicious code in changingalpacaz3n npm...

EUVD-2025-95088

Malicious code in silkyalpacaz3n npm...

Malicious code in identical_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145f95f5a55a303acf898b70ba3061882d632019e27c143439902615b2979551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74232

Malicious code in smoggyalpacateal-48 npm...

EUVD-2025-75514

Malicious code in successivealpaca-notthedev npm...

EUVD-2025-76874

Malicious code in fatalalpaca-gooddev npm...

EUVD-2025-76722

Malicious code in greatalpaca-silentdev npm...

EUVD-2025-76572

Malicious code in independentalpaca-appteadev npm...

EUVD-2025-75624

Malicious code in slightalpaca-biggestdev npm...

EUVD-2025-75606

Malicious code in smartalpaca-appteadev npm...

MAL-2025-108857 Malicious code in smart_alpaca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d4319d72fb4e34ae2a67e415f75137a1d8f6dae2110c2460f1f01f1a8eb66c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77542

Malicious code in productivealpacaaquamarine-22 npm...

MAL-2025-108509 Malicious code in selective_alpaca_violet-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7ab4287c079843020a63b68a1e83e46b13ffcfa11c3ca71a641c77ad2a01e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...