MAL-2026-6607 Malicious code in @content-editor/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af120addbb0e18e1202a82729c25dc190dba070fee695cc22bcb91c7eea6ad25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2026-50171

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, a Denial of Service DoS vulnerability exists in the @angular/common package of Angular. The formatNumber functio...

aana (>=0.2.1 <=0.2.2), ace-step (=0.1.0) +235 more potentially affected by CVE-2026-45804 via diffusers (>=0.10.2 <=0.37.1)

diffusers PYPI version =0.10.2, =0.2.1, =1.8.20, =1.9.0, =0.0.0, =0.2.2, =0.0.2, =0.0.0, =0.1.0, =0.6.37, =0.0.4, =0.1.0, =0.1.0, =0.5.0 and more Source cves: CVE-2026-45804 Source advisory: SNYK:PYTHON-DIFFUSERS-16787358...

MAL-2026-3731 Malicious code in mrgn-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16fe2927853a543269a7eb66273bfea477dd040bc2e90f40d9b3642e9d138f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ssh-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d42bf2b2b77d94173694ed6e952fc5efb2d0de3b04f237f15ffa9470809a321e The package ssh-common was found to contain malicious code...

Malicious code in securefiles-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e6eb158a4a31560fd7d020c4644db9f8795bf0049b5e15a5ab5cccea05e68ee The package securefiles-common was found to contain malicious code...

@oneuptime/cli (>=10.0.10 <=10.0.20) potentially affected by CVE-2026-30957 via @oneuptime/common (>=10.0.10 <=10.0.20)

@oneuptime/common NPM version =10.0.10, =10.0.10, =10.0.20 Source cves: CVE-2026-30957 Source advisory: OSV:GHSA-JW8Q-GJVG-8W4Q...

@oneuptime/cli (>=10.0.10 <=10.0.19) potentially affected by CVE-2026-30921 via @oneuptime/common (>=10.0.10 <=10.0.19)

@oneuptime/common NPM version =10.0.10, =10.0.10, =10.0.19 Source cves: CVE-2026-30921 Source advisory: OSV:GHSA-4J36-39GM-8VQ8...

dbt-databricks (>=1.11.1 <=1.11.3) potentially affected by CVE-2026-29790 via dbt-common (=1.36.0)

dbt-common PYPI version =1.36.0 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-common and may be impacted: - dbt-databricks =1.11.1, =1.11.3 Source cves: CVE-2026-29790 Source advisory: OSV:GHSA-W75W-9QV4-J5XJ...

SUSE SLES15: kubernetes1.35-client / kubernetes1.35-client-bash-completion / etc (SUSE-SU-2026:0325-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0325-1 advisory. This update for kubernetes rebuilds it against the current GO security release. Tenable has extracted the preceding descriptio...

Malicious code in nyse-web-tools-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b342ea907a70673cd21fd5f5a5de071c5af10278ab0cdc695cdd98e37bb8063 The package nyse-web-tools-common was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-200060

Malicious code in debug-common npm...

Malicious code in @voiceflow/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31b6225a913c42ff3e119872d881af1992d5de51a2cf9632f3c055a8fd577c9 The package @voiceflow/common was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-37119

Malicious code in epic-node-services-common npm...

Malicious code in epic-node-services-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a56c7af2b6009234c70bfecc0a432077b5d114c759db50acb84b2841c2ee452 The package epic-node-services-common was found to contain malicious code...

MAL-2025-49174 Malicious code in epic-node-services-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a56c7af2b6009234c70bfecc0a432077b5d114c759db50acb84b2841c2ee452 The package epic-node-services-common was found to contain malicious code...

Malicious code in java-common (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 555d7c368b052227256d6f6b35ce4b6d84da939df3127667ff6e73515dbee1bd Any computer that has this package installed or running should be considered...

Malicious code in @citi-gcg-167407/common (npm)

The package @citi-gcg-167407/common was found to contain malicious code...

Malicious code in paychex-common-npm (npm)

The package paychex-common-npm was found to contain malicious code...