MAL-2026-1944 Malicious code in couplus-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c78a6293dc26a858801e92b94142c0fb6ab09c558b39900095be8a8aef9a52 The package couplus-cli was found to contain malicious code. Source: ghsa-malware 469c68fc4282e268dbe121670070e4a148ec18adaad72317ca06de47eed59217 An...

tempo-cli-2.10.3-1.1 on GA media (moderate)

tempo-cli-2.10.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10390-1 Rating: moderate Cross-References: CVE-2026-28377 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2026-33002

A flaw was found in Jenkins. A remote attacker could exploit a vulnerability in the origin validation of requests made through the Command Line Interface CLI WebSocket endpoint. By manipulating the Host or X-Forwarded-Host HTTP headers, an attacker can perform Domain Name System DNS rebinding...

GHSA-PHHV-63FH-RRC8 Jenkins has a DNS rebinding vulnerability in WebSocket CLI origin validation

Jenkins 2.442 through 2.554 both inclusive, LTS 2.426.3 through LTS 2.541.2 both inclusive performs origin validation of requests made through the CLI WebSocket endpoint by computing the expected origin for comparison using the Host or X-Forwarded-Host HTTP request headers, making it vulnerable t...

@oneuptime/cli (>=10.0.23, <=10.0.33) potentially affected by CVE-2026-33143 via @oneuptime/common (>=10.0.23, <=10.0.33)

@oneuptime/common NPM version =10.0.23, =10.0.23, =10.0.33 Source cves: CVE-2026-33143 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15842853...

@oneuptime/cli (>=10.0.5, <=10.0.33) potentially affected by CVE-2026-33142 via @oneuptime/common (>=10.0.5, <=10.0.33)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.33 Source cves: CVE-2026-33142 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15842854...

Insecure Temporary File

Overview @capgo/cli is an A CLI to upload to capgo servers Affected versions of this package are vulnerable to Insecure Temporary File via unsafe file operations that follow symlinks and do not enforce secure permissions. An attacker can overwrite arbitrary files or expose sensitive credential...

CVE-2026-33002

Jenkins 2.442 through 2.554 both inclusive, LTS 2.426.3 through LTS 2.541.2 both inclusive performs origin validation of requests made through the CLI WebSocket endpoint by computing the expected origin for comparison using the Host or X-Forwarded-Host HTTP request headers, making it vulnerable t...

MAL-2026-1802 Malicious code in node-cli-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7df6bef20ed41b1a5c7e3ca57da4665f799cfcc6d6cf27b6dc87f8fa0560bc The package node-cli-dotenv was found to contain malicious code...

MAL-2026-1713 Malicious code in dotenv-node-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f6b181cb56922381245597b93fd06147dd83845cd9467098172f6eab07a7c0 The package dotenv-node-cli was found to contain malicious code...

Malicious code in dotenv-node-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f6b181cb56922381245597b93fd06147dd83845cd9467098172f6eab07a7c0 The package dotenv-node-cli was found to contain malicious code...

MAL-2026-1712 Malicious code in dotenv-mono-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e4774845081c77828c11c246f1224738c74e91df84182defb19b32ff6a8757 The package dotenv-mono-cli was found to contain malicious code...

Malicious code in dotenv-mono-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e4774845081c77828c11c246f1224738c74e91df84182defb19b32ff6a8757 The package dotenv-mono-cli was found to contain malicious code...

Malicious code in dotenv-cli-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914751db31692fb4c83c9e8e3e2fed123b349d261368499b9caf33dc411b62cd The package dotenv-cli-node was found to contain malicious code...

MAL-2026-1710 Malicious code in dotenv-cli-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914751db31692fb4c83c9e8e3e2fed123b349d261368499b9caf33dc411b62cd The package dotenv-cli-node was found to contain malicious code...

MAL-2026-1690 Malicious code in chain-promised-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905259914ab893ce8ca6d455af186ca553bb76d253657ea9f38457798519c708 The package chain-promised-cli was found to contain malicious code...

Malicious code in chain-promised-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905259914ab893ce8ca6d455af186ca553bb76d253657ea9f38457798519c708 The package chain-promised-cli was found to contain malicious code...

Malicious code in chain-cli-promised (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7e399daf13fda688fc1a6bb911c0bf7582ef52fff3eb5af58fbd8c0934b88a The package chain-cli-promised was found to contain malicious code...

MAL-2026-1687 Malicious code in chain-cli-promised (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7e399daf13fda688fc1a6bb911c0bf7582ef52fff3eb5af58fbd8c0934b88a The package chain-cli-promised was found to contain malicious code...

Malicious code in chai-promised-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48b1d1fa87c7390aa0257628dfbbff9d4a72745789925a041968bcd789764340 The package chai-promised-cli was found to contain malicious code...