Malicious code in @modals/blockchain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9883b4336552c287c2c3ed9bb5888cc22173cd8b39fd181552f858607f0ffa70 The package @modals/blockchain was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2018 Malicious code in @modals/blockchain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9883b4336552c287c2c3ed9bb5888cc22173cd8b39fd181552f858607f0ffa70 The package @modals/blockchain was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @modals/layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd7a47296a1be165b33bf8cc140bf4b6b004025557cfb22a0b75c4ec8eea864 The package @modals/layout was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2019 Malicious code in @modals/layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd7a47296a1be165b33bf8cc140bf4b6b004025557cfb22a0b75c4ec8eea864 The package @modals/layout was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in lingewindows (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1764671c9ae79c37db80b846d9e8efe94714732160dda25659a8e96f7dadb39d The package lingewindows was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2015 Malicious code in lingewindows (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1764671c9ae79c37db80b846d9e8efe94714732160dda25659a8e96f7dadb39d The package lingewindows was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in characterai-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376ab6840d12bf4d2b6ff51f365071cdefb5fae185ba150f7a8db8b70b925155 The package characterai-poc was found to contain malicious code. Source: ghsa-malware e45663d55a0e072d7245ee8cf3a8557710aef6e643c135b20a0918aa96d2da9...

MAL-2026-2012 Malicious code in characterai-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376ab6840d12bf4d2b6ff51f365071cdefb5fae185ba150f7a8db8b70b925155 The package characterai-poc was found to contain malicious code. Source: ghsa-malware e45663d55a0e072d7245ee8cf3a8557710aef6e643c135b20a0918aa96d2da9...

Malicious code in cms-catalogue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d08a53064a76469a8b5ab4afdb3aa2907127f26f98ac8255e3ae650f8ce5d1ba The package cms-catalogue was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2010 Malicious code in yelp-react-component-badge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abec06c903f4139ed298b19b96521401231e6bd0cc306e5e7015d971d5a4260a The package yelp-react-component-badge was found to contain malicious code. Source: ghsa-malware...

Malicious code in repo-typescript-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c009aa720ff70075b05dfa732a4d21fb40241c526d6615825dea97202843b252 The package repo-typescript-config was found to contain malicious code. Source: ghsa-malware...

MAL-2026-2008 Malicious code in nintendoamerica-ncom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd460f8f84945495991b78c3eaf7d639b5b9be34dbe78af64373c222e8cd245 The package nintendoamerica-ncom was found to contain malicious code. Source: ghsa-malware...

Malicious code in nintendoamerica-ncom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd460f8f84945495991b78c3eaf7d639b5b9be34dbe78af64373c222e8cd245 The package nintendoamerica-ncom was found to contain malicious code. Source: ghsa-malware...

Missing Authentication

Glances is vulnerable to Missing Authentication. The vulnerability is due to the web server running without authentication by default glances -w, exposing REST API endpoints that return sensitive system information, including process command-lines containing credentials, to any network client...

MAL-2026-2007 Malicious code in uniswap-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b0c2ab6814aa67c139dffb11add8c0013caa86df1cffd6c9e1c0de09bd395c The package uniswap-info was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in uniswap-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b0c2ab6814aa67c139dffb11add8c0013caa86df1cffd6c9e1c0de09bd395c The package uniswap-info was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2026-13935

OpenClaw versions prior to 2026.2.25 contain a time-of-check-time-of-use vulnerability in approval-bound system.run execution where the cwd parameter is validated at approval time but resolved at execution time. Attackers can retarget a symlinked cwd between approval and execution to bypass comma...

Duplicate Advisory: OpenClaw's system.run approval TOCTOU via mutable symlink cwd target on node host

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mwcg-wfq3-4gjc. This link is maintained to preserve external references. Original Description OpenClaw versions prior to 2026.2.25 contain a time-of-check-time-of-use vulnerability in approval-bound system.run...

CVE-2026-32052 OpenClaw < 2026.2.24 - Hidden Command Execution via Shell-Wrapper Positional argv Carriers

OpenClaw versions prior to 2026.2.24 contain a command injection vulnerability in the system.run shell-wrapper that allows attackers to execute hidden commands by injecting positional argv carriers after inline shell payloads. Attackers can craft misleading approval text while executing arbitrary...

CVE-2026-32043 OpenClaw < 2026.2.25 - Time-of-Check-Time-of-Use via Mutable Symlink in system.run cwd Parameter

OpenClaw versions prior to 2026.2.25 contain a time-of-check-time-of-use vulnerability in approval-bound system.run execution where the cwd parameter is validated at approval time but resolved at execution time. Attackers can retarget a symlinked cwd between approval and execution to bypass comma...