@ccfly/setup (0.1.0) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.0)

@ccfly/setup-darwin-x64 NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.0 Source cves: unknown CVE Source advisory: GHSA-87C6-7QMM-V69P...

@ccfly/setup (0.1.1) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.1)

@ccfly/setup-darwin-x64 NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.1 Source cves: unknown CVE Source advisory: GHSA-87C6-7QMM-V69P...

@ccfly/setup (0.1.3) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.3)

@ccfly/setup-darwin-x64 NPM version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.3 Source cves: unknown CVE Source advisory: GHSA-87C6-7QMM-V69P...

@ccfly/setup (0.1.6) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.6)

@ccfly/setup-darwin-x64 NPM version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.6 Source cves: unknown CVE Source advisory: GHSA-87C6-7QMM-V69P...

@ccfly/setup (0.1.7) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.7)

@ccfly/setup-darwin-x64 NPM version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.7 Source cves: unknown CVE Source advisory: GHSA-87C6-7QMM-V69P...

@ccfly/setup (0.1.8) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.8)

@ccfly/setup-darwin-x64 NPM version 0.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.8 Source cves: unknown CVE Source advisory: GHSA-87C6-7QMM-V69P...

@ccfly/setup (0.1.9) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.9)

@ccfly/setup-darwin-x64 NPM version 0.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.9 Source cves: unknown CVE Source advisory: GHSA-87C6-7QMM-V69P...

@ccfly/setup (0.1.13) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.13)

@ccfly/setup-darwin-x64 NPM version 0.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.13 Source cves: unknown CVE Source advisory: GHSA-87C6-7QMM-V69P...

@ccfly/setup (0.1.14) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.14)

@ccfly/setup-darwin-x64 NPM version 0.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.14 Source cves: unknown CVE Source advisory: GHSA-87C6-7QMM-V69P...

@ccfly/setup (0.1.15) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.15)

@ccfly/setup-darwin-x64 NPM version 0.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.15 Source cves: unknown CVE Source advisory: GHSA-87C6-7QMM-V69P...

@ccfly/setup (0.1.16) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.16)

@ccfly/setup-darwin-x64 NPM version 0.1.16 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.16 Source cves: unknown CVE Source advisory: GHSA-87C6-7QMM-V69P...

Malicious code in @ccfly/setup-darwin-x64 (npm)

Source: amazon-inspector 409d11825a61bed068425296e83dcc0c87427579f7b5d724ec52e5e87465f2b5 The package ships a prebuilt darwin/x64 Mach-O binary containing a Go agent module github.com/ccfly/rescue that, when executed, connects to a hardcoded remote broker at cc.hn / ccfly over WebSocket ws://ccfl...

@ccfly/setup (0.1.3) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.3)

@ccfly/setup-darwin-x64 NPM version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12313...

@ccfly/setup (0.1.6) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.6)

@ccfly/setup-darwin-x64 NPM version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12313...

@ccfly/setup (0.1.0) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.0)

@ccfly/setup-darwin-x64 NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12313...

@ccfly/setup (0.1.14) potentially affected by unknown CVE via @ccfly/setup-darwin-x64 (0.1.14)

@ccfly/setup-darwin-x64 NPM version 0.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-darwin-x64 and may be impacted: - @ccfly/setup 0.1.14 Source cves: unknown CVE Source advisory: OSV:MAL-2026-12313...