Medium: python-pip

Issue Overview: urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage an...

AWS VDP: Password Reuse Vulnerability on AWS Sign-in Page via Password Reset Flow leads to Security Policy Violation

Asset URL: ██████ Summary: The AWS sign-in page allows users to reuse old passwords when resetting their password, which violates security best practices outlined in OWASP Authentication Cheat Sheet and NIST 800-63B Digital Identity Guidelines. This misconfiguration could potentially weaken accou...

How 2 Missing Characters Nearly Compromised AWS

A supply chain vulnerability in AWS CodeBuild recently put the entire AWS Console at risk. Learn how Wiz Research found the flaw and how Amazon responded to prevent a global security crisis...

Malicious code in idel2-content (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c81387cec5e85e071f4ffa2a4791747c731e8f247b60c236fa2a4ff7c0e1858 The package idel2-content was found to contain malicious code. Source: ghsa-malware 878a0a64404d0cc18be1c02fa0a38a98513049bccb02e919e4d8ee3c632f004a...

Malicious code in lusha-micro-app-messages (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2763ac2e60a783720a4825cd416a2c3e991ab820c9a11c72d809c5162eb822 The package lusha-micro-app-messages was found to contain malicious code. Source: ghsa-malware...

Malicious code in alf-ui-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e921c338478d9d9b6dd8bcf6413b03594cac2e53ac71b26a059488ee0833a9d8 The package alf-ui-js was found to contain malicious code. Source: ghsa-malware 32056719006c9565534074da200f7147ab2f96db963b372e3cf8e1e362d20ea3 Any...

Malicious code in origin_response_handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430f01e7a54ba6e13e0d26328d24c5fc2c743d67188653b4d61891fedb6dc68f The package originresponsehandler was found to contain malicious code. Source: ghsa-malware...

Malicious code in flag-v21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 861f8969022fe9225cbe8c49c702b9604d3d204909179189ab09fa288c2c8b68 The package flag-v21 was found to contain malicious code...

Malicious code in omnicore-ds2-sdk2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e1c62468ce0da7fc1beb34de16d8faa8633411ce4217f2d4e6b6bf3fc92a53 The package omnicore-ds2-sdk2 was found to contain malicious code...

MAL-2026-298 Malicious code in omnicore-ds2-sdk2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e1c62468ce0da7fc1beb34de16d8faa8633411ce4217f2d4e6b6bf3fc92a53 The package omnicore-ds2-sdk2 was found to contain malicious code...

MAL-2026-297 Malicious code in omnicore-ds2-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3582de0d77fa95932500d8933267b336557148b45ed5f23d090e2982962d9e The package omnicore-ds2-sdk was found to contain malicious code. Source: ghsa-malware 7990efbda2464df9633bde060381ff6c9ec75fa286fafb46cc27b4a16c6a98...

Malicious code in eniram-web-common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0fed7ec2d24f837bd31fd9768a9727452b9bf8ed355a7073f055fb4fba075c8 The package eniram-web-common-ui was found to contain malicious code. Source: ghsa-malware...

MAL-2026-302 Malicious code in s3-cache-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a516ba427a772d00c202a782f0c11f2217ddb8360626591dbbd72b68cc5a1b The package s3-cache-handler was found to contain malicious code...

Malicious code in forms-new-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf1f5f8d78c6e26b45ef4a895859922f68ff7afb558284111a34f497681b324 The package forms-new-design was found to contain malicious code. Source: ghsa-malware 45f98af63ec853b571da818f8d974890156b0fd52c9c2ab3fa74a4e213ff3f...

Malicious code in @ux-foundry/palette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd18fdf82036fc2f39aba4198fb081eb4cb5683f9b9308bdb2a0f8539c54275 The package @ux-foundry/palette was found to contain malicious code. Source: ghsa-malware...

Malicious code in textual-sorter-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3afbb34c235a6e723240bd6cf03017355ea0a672b66fe36903bd1b7ef4fd050 The package textual-sorter-lib was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwind-merge-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7eb6509e7116f0d29cc221829baf733446faecce580b8d9334b6a43586ad58 The package tailwind-merge-v3 was found to contain malicious code. Source: ghsa-malware...

Malicious code in @spx-smartsorting/vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0f383e5f85168809feb97c29b3dfbd12d807bcf0de67ae579f0dcc606889cc The package @spx-smartsorting/vue was found to contain malicious code. Source: ghsa-malware...

Malicious code in assurance-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8abc4852c66bf4b76ca608a34a2c7ec7a32f25ade245d11fd2eb4429d2ad48 The package assurance-common-components was found to contain malicious code. Source: ghsa-malware...

Malicious code in nyse-web-tools-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b342ea907a70673cd21fd5f5a5de071c5af10278ab0cdc695cdd98e37bb8063 The package nyse-web-tools-common was found to contain malicious code. Source: ghsa-malware...