com.hazelcast.jet:hazelcast-jet-client-protocol (0.6), com.hazelcast.jet:hazelcast-jet-core (0.6) +4 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.10-beta-2)

com.hazelcast:hazelcast MAVEN version 3.10-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet-client-protocol 0.6 - com.hazelcast.jet:hazelcast-jet-core 0.6 -...

com.hazelcast:hazelcast-build-utils (3.9-ea), com.hazelcast:hazelcast-client (3.9-ea) +4 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.9-ea)

com.hazelcast:hazelcast MAVEN version 3.9-ea is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.9-ea - com.hazelcast:hazelcast-client 3.9-ea -...

com.hazelcast:hazelcast-build-utils (4.0.4), com.hazelcast:hazelcast-spring (4.0.4) potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.0.4)

com.hazelcast:hazelcast MAVEN version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.0.4 - com.hazelcast:hazelcast-spring 4.0.4 Source cves: CVE-2026-107725...

com.hazelcast:hazelcast-build-utils (3.12-beta-2), com.hazelcast:hazelcast-client (3.12-beta-2) +1 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.12-beta-2)

com.hazelcast:hazelcast MAVEN version 3.12-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.12-beta-2 - com.hazelcast:hazelcast-client 3.12-beta-2 -...

com.hazelcast:hazelcast-build-utils (4.1.7), com.hazelcast:hazelcast-spring (4.1.7) +2 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.1.7)

com.hazelcast:hazelcast MAVEN version 4.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.1.7 - com.hazelcast:hazelcast-spring 4.1.7 - com.hazelcast:hazelcast-sql...

ch.mobi.mobitor:mobitor-base (>=3.1.13, <=3.1.97), ch.mobi.mobitor:mobitor-doc (3.1.13) +39 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.11.2)

com.hazelcast:hazelcast MAVEN version 3.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - ch.mobi.mobitor:mobitor-base =3.1.13, =2.1.6, =1.1.4, =2.1.4, =2.0.9.0, =0.1.0, =0.1.1 -...

com.github.pires:hazelcast-kubernetes-bootstrapper (3.8.6), com.hazelcast:hazelcast-build-utils (3.8.6) +26 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.8.6)

com.hazelcast:hazelcast MAVEN version 3.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.github.pires:hazelcast-kubernetes-bootstrapper 3.8.6 - com.hazelcast:hazelcast-build-utils 3.8.6 -...

com.hazelcast:hazelcast-build-utils (4.0.6), com.hazelcast:hazelcast-spring (4.0.6) potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.0.6)

com.hazelcast:hazelcast MAVEN version 4.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.0.6 - com.hazelcast:hazelcast-spring 4.0.6 Source cves: CVE-2026-107725...

com.hazelcast:hazelcast-build-utils (3.10-beta-1), com.hazelcast:hazelcast-client (3.10-beta-1) +1 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.10-beta-1)

com.hazelcast:hazelcast MAVEN version 3.10-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.10-beta-1 - com.hazelcast:hazelcast-client 3.10-beta-1 -...

cloud.piranha.session:piranha-session-hazelcast (20.2.0), com.erudika:para-cache-hazelcast (1.34.0) +52 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.12.5)

com.hazelcast:hazelcast MAVEN version 3.12.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - cloud.piranha.session:piranha-session-hazelcast 20.2.0 - com.erudika:para-cache-hazelcast 1.34.0 -...

com.hazelcast:hazelcast-build-utils (3.10.7), com.hazelcast:hazelcast-client (3.10.7) +1 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.10.7)

com.hazelcast:hazelcast MAVEN version 3.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.10.7 - com.hazelcast:hazelcast-client 3.10.7 -...

com.erudika:para-cache-hazelcast (1.29.1), com.giffing.bucket4j.spring.boot.starter:bucket4j-spring-boot-starter (>=0.1.4, <=0.1.15) +76 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.9.4)

com.hazelcast:hazelcast MAVEN version 3.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.erudika:para-cache-hazelcast 1.29.1 - com.giffing.bucket4j.spring.boot.starter:bucket4j-spring-boot-starter...

Malicious Package

Overview bfox-build-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-17319 Malicious code in bfox-build-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cae53348f8261653938b39ae3cb79101baff666c4216ecaeb635e34b42ba8293 At install time, setup.py harvests the installer's GitHub credential and uses it to modify the installer's own repository. The script reads...

Malicious code in bfox-build-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cae53348f8261653938b39ae3cb79101baff666c4216ecaeb635e34b42ba8293 At install time, setup.py harvests the installer's GitHub credential and uses it to modify the installer's own repository. The script reads...

MAL-2026-10905 Malicious code in win-build-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03bd3facc00c36861223058a572fbaa888d815a06c7b309c44639c544c65f1d9 The package name suggests a Windows build helper utility, but no concrete behavioral evidence is available to confirm or refute installer-side risk. ...

MAL-2026-1220 Malicious code in corp-build-utils-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862b2e0a8f0028f96ee10ab1a7c8ea0fc397169634a9473a09865a173c483c92 The package corp-build-utils-poc was found to contain malicious code. Source: ghsa-malware...

Malicious code in corp-build-utils-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862b2e0a8f0028f96ee10ab1a7c8ea0fc397169634a9473a09865a173c483c92 The package corp-build-utils-poc was found to contain malicious code. Source: ghsa-malware...

com.hazelcast:hazelcast-build-utils (3.9-ea), com.hazelcast:hazelcast-client (3.9-ea) +4 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.9-ea)

com.hazelcast:hazelcast MAVEN version 3.9-ea is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.9-ea - com.hazelcast:hazelcast-client 3.9-ea -...

com.hazelcast:hazelcast-build-utils (3.8.8), com.hazelcast:hazelcast-client (3.8.8) +1 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.8.8)

com.hazelcast:hazelcast MAVEN version 3.8.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.8.8 - com.hazelcast:hazelcast-client 3.8.8 - com.hazelcast:hazelcast-spring...