code-shame (0.2.0), fallow (>=3.0.0, <=3.33.1) +1 more potentially affected by CVE-2026-115569 via @fallow-cli/darwin-arm64 (>=3.0.0, <=3.33.1)

@fallow-cli/darwin-arm64 NPM version =3.0.0, =3.0.0, =1.19.2, =1.24.4 Source cves: CVE-2026-115569 Source advisory: MEND:CVE-2026-115569...

reasonix (>=1.1.0-rc.1, <=1.39.2) potentially affected by CVE-2026-102437 via @reasonix/cli-darwin-arm64 (>=1.1.0-rc.1, <=1.39.2)

@reasonix/cli-darwin-arm64 NPM version =1.1.0-rc.1, =1.1.0-rc.1, =1.39.2 Source cves: CVE-2026-102437 Source advisory: MEND:CVE-2026-102437...

@kilocode/cli (>=7.2.3, <=7.4.0) potentially affected by CVE-2026-79403 via @kilocode/cli-darwin-arm64 (>=7.2.3, <=7.4.0)

@kilocode/cli-darwin-arm64 NPM version =7.2.3, =7.2.3, =7.4.0 Source cves: CVE-2026-79403 Source advisory: MEND:CVE-2026-79403...

Malicious code in sextant-cli-darwin-arm64 (npm)

Source: amazon-inspector 23978b08a7e3f8af97d2c8060e7fc3aca9a18d9f3435163a9d3ab97ac0b9d4d0 Package ships a darwin/arm64 Go binary that opens an outbound WebSocket to a hardcoded author-controlled relay at wss://relay.sextant.top and links a PTY library github.com/creack/pty with a WebSocket client...

sextant-cli (0.0.1-rc10) potentially affected by unknown CVE via sextant-cli-darwin-arm64 (0.0.1-rc10)

sextant-cli-darwin-arm64 NPM version 0.0.1-rc10 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-darwin-arm64 and may be impacted: - sextant-cli 0.0.1-rc10 Source cves: unknown CVE Source advisory: GHSA-2QG7-5P3X-VR75...

sextant-cli (0.0.1-rc13) potentially affected by unknown CVE via sextant-cli-darwin-arm64 (0.0.1-rc13)

sextant-cli-darwin-arm64 NPM version 0.0.1-rc13 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-darwin-arm64 and may be impacted: - sextant-cli 0.0.1-rc13 Source cves: unknown CVE Source advisory: GHSA-2QG7-5P3X-VR75...

sextant-cli (0.0.1-rc15) potentially affected by unknown CVE via sextant-cli-darwin-arm64 (0.0.1-rc15)

sextant-cli-darwin-arm64 NPM version 0.0.1-rc15 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-darwin-arm64 and may be impacted: - sextant-cli 0.0.1-rc15 Source cves: unknown CVE Source advisory: GHSA-2QG7-5P3X-VR75...

sextant-cli (0.0.1-rc17) potentially affected by unknown CVE via sextant-cli-darwin-arm64 (0.0.1-rc17)

sextant-cli-darwin-arm64 NPM version 0.0.1-rc17 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-darwin-arm64 and may be impacted: - sextant-cli 0.0.1-rc17 Source cves: unknown CVE Source advisory: GHSA-2QG7-5P3X-VR75...

sextant-cli (0.0.1-rc21) potentially affected by unknown CVE via sextant-cli-darwin-arm64 (0.0.1-rc21)

sextant-cli-darwin-arm64 NPM version 0.0.1-rc21 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-darwin-arm64 and may be impacted: - sextant-cli 0.0.1-rc21 Source cves: unknown CVE Source advisory: GHSA-2QG7-5P3X-VR75...

sextant-cli (0.0.1-rc23) potentially affected by unknown CVE via sextant-cli-darwin-arm64 (0.0.1-rc23)

sextant-cli-darwin-arm64 NPM version 0.0.1-rc23 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-darwin-arm64 and may be impacted: - sextant-cli 0.0.1-rc23 Source cves: unknown CVE Source advisory: GHSA-2QG7-5P3X-VR75...

sextant-cli (0.0.1-rc24) potentially affected by unknown CVE via sextant-cli-darwin-arm64 (0.0.1-rc24)

sextant-cli-darwin-arm64 NPM version 0.0.1-rc24 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-darwin-arm64 and may be impacted: - sextant-cli 0.0.1-rc24 Source cves: unknown CVE Source advisory: GHSA-2QG7-5P3X-VR75...

sextant-cli (0.0.1-rc27) potentially affected by unknown CVE via sextant-cli-darwin-arm64 (0.0.1-rc27)

sextant-cli-darwin-arm64 NPM version 0.0.1-rc27 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-darwin-arm64 and may be impacted: - sextant-cli 0.0.1-rc27 Source cves: unknown CVE Source advisory: GHSA-2QG7-5P3X-VR75...

sextant-cli (0.0.1-rc30) potentially affected by unknown CVE via sextant-cli-darwin-arm64 (0.0.1-rc30)

sextant-cli-darwin-arm64 NPM version 0.0.1-rc30 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-darwin-arm64 and may be impacted: - sextant-cli 0.0.1-rc30 Source cves: unknown CVE Source advisory: GHSA-2QG7-5P3X-VR75...

sextant-cli (0.0.1-rc31) potentially affected by unknown CVE via sextant-cli-darwin-arm64 (0.0.1-rc31)

sextant-cli-darwin-arm64 NPM version 0.0.1-rc31 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-darwin-arm64 and may be impacted: - sextant-cli 0.0.1-rc31 Source cves: unknown CVE Source advisory: GHSA-2QG7-5P3X-VR75...

sextant-cli (0.0.1-rc32) potentially affected by unknown CVE via sextant-cli-darwin-arm64 (0.0.1-rc32)

sextant-cli-darwin-arm64 NPM version 0.0.1-rc32 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-darwin-arm64 and may be impacted: - sextant-cli 0.0.1-rc32 Source cves: unknown CVE Source advisory: GHSA-2QG7-5P3X-VR75...

sextant-cli (0.0.1-rc34) potentially affected by unknown CVE via sextant-cli-darwin-arm64 (0.0.1-rc34)

sextant-cli-darwin-arm64 NPM version 0.0.1-rc34 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-darwin-arm64 and may be impacted: - sextant-cli 0.0.1-rc34 Source cves: unknown CVE Source advisory: GHSA-2QG7-5P3X-VR75...

sextant-cli (0.0.1-rc36) potentially affected by unknown CVE via sextant-cli-darwin-arm64 (0.0.1-rc36)

sextant-cli-darwin-arm64 NPM version 0.0.1-rc36 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-darwin-arm64 and may be impacted: - sextant-cli 0.0.1-rc36 Source cves: unknown CVE Source advisory: GHSA-2QG7-5P3X-VR75...

sextant-cli (0.0.1-rc38) potentially affected by unknown CVE via sextant-cli-darwin-arm64 (0.0.1-rc38)

sextant-cli-darwin-arm64 NPM version 0.0.1-rc38 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-darwin-arm64 and may be impacted: - sextant-cli 0.0.1-rc38 Source cves: unknown CVE Source advisory: GHSA-2QG7-5P3X-VR75...

sextant-cli (0.0.1-rc5) potentially affected by unknown CVE via sextant-cli-darwin-arm64 (0.0.1-rc5)

sextant-cli-darwin-arm64 NPM version 0.0.1-rc5 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-darwin-arm64 and may be impacted: - sextant-cli 0.0.1-rc5 Source cves: unknown CVE Source advisory: GHSA-2QG7-5P3X-VR75...

sextant-cli (0.0.1-rc6) potentially affected by unknown CVE via sextant-cli-darwin-arm64 (0.0.1-rc6)

sextant-cli-darwin-arm64 NPM version 0.0.1-rc6 is affected by a known vulnerability. The following packages have a transitive dependency on sextant-cli-darwin-arm64 and may be impacted: - sextant-cli 0.0.1-rc6 Source cves: unknown CVE Source advisory: GHSA-2QG7-5P3X-VR75...