org.apache.syncope.client.am:syncope-client-am-console (>=4.0.4, <=4.0.7), org.apache.syncope.client.am:syncope-client-am-enduser (>=4.0.4, <=4.0.7) +12 more potentially affected by CVE-2026-78318 via org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui (>=4.0.4, <=4.0.7)

org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui MAVEN version =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4,...

org.apache.syncope.client.am:syncope-client-am-console (>=4.1.0-m0, <=4.1.2), org.apache.syncope.client.am:syncope-client-am-enduser (>=4.1.0-m0, <=4.1.2) +12 more potentially affected by CVE-2026-78318 via org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui (>=4.1.0-m0, <=4.1.2)

org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.2 - org.apache.syncope.ext.s...

org.apache.syncope.client.am:syncope-client-am-console (>=4.0.4, <=4.0.7), org.apache.syncope.client.am:syncope-client-am-enduser (>=4.0.4, <=4.0.7) +12 more potentially affected by CVE-2026-78318 via org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui (>=4.0.4, <=4.0.7)

org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui MAVEN version =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4, =4.0.4,...

org.apache.syncope.client.am:syncope-client-am-console (>=4.1.0-m0, <=4.1.2), org.apache.syncope.client.am:syncope-client-am-enduser (>=4.1.0-m0, <=4.1.2) +12 more potentially affected by CVE-2026-78318 via org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui (>=4.1.0-m0, <=4.1.2)

org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.2 - org.apache.syncope.ext.s...

Malicious code in citi-common-ui (npm)

--- Credit: OpenSSF source...

Malicious code in @audience-common-ui/components (npm)

Source: amazon-inspector 3e26e359a883cc73de6df21c10ea5bc94596f94ac4c38a3c703f44c91f3a8f1e Package @audience-common-ui/[email protected] is a dependency-confusion probe targeting an internal scope. Both preinstall and postinstall lifecycle hooks in package.json shell out to curl and send the...

Malicious Package

Overview @variational/common-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious code in @variational/common-ui (npm)

Source: amazon-inspector 75a12ea18e08fc325a5698f1da2246ffdfdaa4650971fa2b335fd0904e517079 The package is advertised as 'Shared UI constants and utilities' but lib/index.js executes a malicious payload on require. Sensitive strings hostnames, paths, file targets are obfuscated as numeric charcode...

Malicious code in @audience-common-ui/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e26e359a883cc73de6df21c10ea5bc94596f94ac4c38a3c703f44c91f3a8f1e Package @audience-common-ui/[email protected] is a dependency-confusion probe targeting an internal scope. Both preinstall and postinstall lifecycle...

MAL-2026-4287 Malicious code in @audience-common-ui/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e26e359a883cc73de6df21c10ea5bc94596f94ac4c38a3c703f44c91f3a8f1e Package @audience-common-ui/[email protected] is a dependency-confusion probe targeting an internal scope. Both preinstall and postinstall lifecycle...

Malicious code in @stlm/common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 524e7ff666da99814e99aa71977173170ff4d7d51c5730a30bf0375665f89582 The package @stlm/common-ui was found to contain malicious code. Source: ghsa-malware 2d6d7ee043c22bf0b8caf216d27b99ca30f22667d60e5d1d0c76178c5808ae5...

Malware in @stlm/common-ui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-2997 Malicious code in @stlm/common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 524e7ff666da99814e99aa71977173170ff4d7d51c5730a30bf0375665f89582 The package @stlm/common-ui was found to contain malicious code. Source: ghsa-malware 2d6d7ee043c22bf0b8caf216d27b99ca30f22667d60e5d1d0c76178c5808ae5...

Malicious Package

Overview portal-common-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in portal-common-ui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in portal-common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20bb66164a982bdfd5fb6ee5642b76bbe4eb9fa9945fd86d4f650bc7f0fc14ae The package portal-common-ui was found to contain malicious code. Source: ghsa-malware ddf6d37b9f65968118315afcbff2324922502f9e152274487818d62d7bb122...

MAL-2026-2565 Malicious code in portal-common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20bb66164a982bdfd5fb6ee5642b76bbe4eb9fa9945fd86d4f650bc7f0fc14ae The package portal-common-ui was found to contain malicious code. Source: ghsa-malware ddf6d37b9f65968118315afcbff2324922502f9e152274487818d62d7bb122...

@oneuptime/cli (>=10.0.5, <=10.0.34), @oneuptime/common-server (>=7.0.141, <=7.0.2936) +4 more potentially affected by CVE-2026-33396 via @oneuptime/common (>=7.0.141, <=10.0.34)

@oneuptime/common NPM version =7.0.141, =10.0.5, =7.0.141, =7.0.141, =7.0.141, =7.0.4774, =7.0.141, =7.0.2928 Source cves: CVE-2026-33396 Source advisory: MEND:CVE-2026-33396...

@oneuptime/cli (>=10.0.5, <=10.0.20), @oneuptime/common-server (>=7.0.141, <=7.0.2936) +4 more potentially affected by CVE-2026-30959 via @oneuptime/common (>=7.0.141, <=10.0.20)

@oneuptime/common NPM version =7.0.141, =10.0.5, =7.0.141, =7.0.141, =7.0.141, =7.0.4774, =7.0.141, =7.0.2928 Source cves: CVE-2026-30959 Source advisory: MEND:CVE-2026-30959...

@oneuptime/cli (>=10.0.5, <=10.0.20), @oneuptime/common-server (>=7.0.141, <=7.0.2936) +4 more potentially affected by CVE-2026-30958 via @oneuptime/common (>=7.0.141, <=10.0.20)

@oneuptime/common NPM version =7.0.141, =10.0.5, =7.0.141, =7.0.141, =7.0.141, =7.0.4774, =7.0.141, =7.0.2928 Source cves: CVE-2026-30958 Source advisory: MEND:CVE-2026-30958...