MAL-2026-1689 Malicious code in chain-promised-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9260393814045a3ce0ce9a27ff97fffcbaad7b38ad91f54d8cad995c3deb43af The package chain-promised-async was found to contain malicious code...

Malicious code in chain-promised (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd6ee3247632a88a25b8059314727f1757ed1163081b133945fbe4af59e5d28 The package chain-promised was found to contain malicious code...

Malicious code in chain-cli-promised (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7e399daf13fda688fc1a6bb911c0bf7582ef52fff3eb5af58fbd8c0934b88a The package chain-cli-promised was found to contain malicious code...

MAL-2026-1687 Malicious code in chain-cli-promised (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7e399daf13fda688fc1a6bb911c0bf7582ef52fff3eb5af58fbd8c0934b88a The package chain-cli-promised was found to contain malicious code...

MAL-2026-1688 Malicious code in chain-promised (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd6ee3247632a88a25b8059314727f1757ed1163081b133945fbe4af59e5d28 The package chain-promised was found to contain malicious code...

Malicious code in chain-argon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ee1203bf0112eb0f499bffaaaaa84264b875f83e282b54ec6749fe9230baf2 The package chain-argon was found to contain malicious code...

MAL-2026-1686 Malicious code in chain-argon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ee1203bf0112eb0f499bffaaaaa84264b875f83e282b54ec6749fe9230baf2 The package chain-argon was found to contain malicious code...

Malicious code in chai-chai-chain-promised (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05be57049f1ed27fc157d4893925be0d06323a7b47e8b8893ff0c353e5ddb82d The package chai-chai-chain-promised was found to contain malicious code...

MAL-2026-1676 Malicious code in chai-chai-chain-promised (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05be57049f1ed27fc157d4893925be0d06323a7b47e8b8893ff0c353e5ddb82d The package chai-chai-chain-promised was found to contain malicious code...

Malicious code in chai-await-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee42e0ab59b1093e2cb5da46d6e015073bbae0cba06eb9a0720df44e54c9c111 The package chai-await-chain was found to contain malicious code...

MAL-2026-1673 Malicious code in chai-await-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee42e0ab59b1093e2cb5da46d6e015073bbae0cba06eb9a0720df44e54c9c111 The package chai-await-chain was found to contain malicious code...

Malicious code in @emerald-react/avatar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3683097454908b17afa3726cc9519d1e62c51f5b8932235470cbf0efcfb27099 The package @emerald-react/avatar was found to contain malicious code...

Claude Code Security and Magecart: Getting the Threat Model Right

When a Magecart payload hides inside the EXIF data of a dynamically loaded third-party favicon, no repository scanner will catch it – because the malicious code never actually touches your repo. As teams adopt Claude Code Security for static analysis, this is the exact technical boundary where AI...

MAL-2026-1543 Malicious code in aniresolve (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c29943544c9e6ba7e0a3075c393fa1fa89673c99b73634c0263ef164e52ac306 Package hides code that downloads and runs malware, likely an infostealer. The code is not directly called in the package suggesting it's a dependency or next...

CVE-2026-32608

Glances is an open-source system cross-platform monitoring tool. The Glances action system allows administrators to configure shell commands that execute when monitoring thresholds are exceeded. These commands support Mustache template variables e.g., name, key that are populated with runtime...

CVE-2026-28500

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...

PYSEC-2026-103

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...

PYSEC-2026-103

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...

DEBIAN-CVE-2026-28500

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...

UBUNTU-CVE-2026-28500

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...