Amazon Linux 2 : ImageMagick, --advisory ALAS2-2026-3123 (ALAS-2026-3123)

The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3123 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version...

AWS VDP: Password Reuse Vulnerability on AWS Sign-in Page via Password Reset Flow leads to Security Policy Violation

Asset URL: ██████ Summary: The AWS sign-in page allows users to reuse old passwords when resetting their password, which violates security best practices outlined in OWASP Authentication Cheat Sheet and NIST 800-63B Digital Identity Guidelines. This misconfiguration could potentially weaken accou...

How 2 Missing Characters Nearly Compromised AWS

A supply chain vulnerability in AWS CodeBuild recently put the entire AWS Console at risk. Learn how Wiz Research found the flaw and how Amazon responded to prevent a global security crisis...

Malicious code in omnicore-ds2-sdk2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e1c62468ce0da7fc1beb34de16d8faa8633411ce4217f2d4e6b6bf3fc92a53 The package omnicore-ds2-sdk2 was found to contain malicious code...

Malicious code in lusha-micro-app-messages (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2763ac2e60a783720a4825cd416a2c3e991ab820c9a11c72d809c5162eb822 The package lusha-micro-app-messages was found to contain malicious code. Source: ghsa-malware...

Malicious code in idel2-content (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c81387cec5e85e071f4ffa2a4791747c731e8f247b60c236fa2a4ff7c0e1858 The package idel2-content was found to contain malicious code. Source: ghsa-malware 878a0a64404d0cc18be1c02fa0a38a98513049bccb02e919e4d8ee3c632f004a...

Malicious code in alf-ui-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e921c338478d9d9b6dd8bcf6413b03594cac2e53ac71b26a059488ee0833a9d8 The package alf-ui-js was found to contain malicious code. Source: ghsa-malware 32056719006c9565534074da200f7147ab2f96db963b372e3cf8e1e362d20ea3 Any...

Malicious code in origin_response_handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430f01e7a54ba6e13e0d26328d24c5fc2c743d67188653b4d61891fedb6dc68f The package originresponsehandler was found to contain malicious code. Source: ghsa-malware...

Malicious code in flag-v21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 861f8969022fe9225cbe8c49c702b9604d3d204909179189ab09fa288c2c8b68 The package flag-v21 was found to contain malicious code...

MAL-2026-297 Malicious code in omnicore-ds2-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3582de0d77fa95932500d8933267b336557148b45ed5f23d090e2982962d9e The package omnicore-ds2-sdk was found to contain malicious code. Source: ghsa-malware 7990efbda2464df9633bde060381ff6c9ec75fa286fafb46cc27b4a16c6a98...

MAL-2026-298 Malicious code in omnicore-ds2-sdk2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e1c62468ce0da7fc1beb34de16d8faa8633411ce4217f2d4e6b6bf3fc92a53 The package omnicore-ds2-sdk2 was found to contain malicious code...

Malicious code in forms-new-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf1f5f8d78c6e26b45ef4a895859922f68ff7afb558284111a34f497681b324 The package forms-new-design was found to contain malicious code. Source: ghsa-malware 45f98af63ec853b571da818f8d974890156b0fd52c9c2ab3fa74a4e213ff3f...

Malicious code in tailwind-merge-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7eb6509e7116f0d29cc221829baf733446faecce580b8d9334b6a43586ad58 The package tailwind-merge-v3 was found to contain malicious code. Source: ghsa-malware...

Malicious code in textual-sorter-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3afbb34c235a6e723240bd6cf03017355ea0a672b66fe36903bd1b7ef4fd050 The package textual-sorter-lib was found to contain malicious code. Source: ghsa-malware...

Malicious code in flag-v211 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f225748a91e64bc77a6b8344c2eefb007f216b3c596ce5b19e92e4dfbd1f4ff The package flag-v211 was found to contain malicious code...

Malicious code in @spx-smartsorting/vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0f383e5f85168809feb97c29b3dfbd12d807bcf0de67ae579f0dcc606889cc The package @spx-smartsorting/vue was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ux-foundry/palette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd18fdf82036fc2f39aba4198fb081eb4cb5683f9b9308bdb2a0f8539c54275 The package @ux-foundry/palette was found to contain malicious code. Source: ghsa-malware...

Malicious code in nyse-web-tools-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b342ea907a70673cd21fd5f5a5de071c5af10278ab0cdc695cdd98e37bb8063 The package nyse-web-tools-common was found to contain malicious code. Source: ghsa-malware...

Malicious code in assurance-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8abc4852c66bf4b76ca608a34a2c7ec7a32f25ade245d11fd2eb4429d2ad48 The package assurance-common-components was found to contain malicious code. Source: ghsa-malware...

MAL-2026-319 Malicious code in vue_frontend_rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b3b39f0c20a8dd65bccdba671ecc5761e03146f454226847e982c424b8c25b The package vuefrontendrpc was found to contain malicious code. Source: ghsa-malware 30e31020ae5911a45b568d33238a4785bb2149dc1a8b474ac220aacb60546551...