107 matches found
Malicious Package
Overview @hrmony/component-library is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malware in @hrmony/component-library
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2026-17259 Malicious code in @hrmony/component-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93efe09ed89a9899669e54f614f80d91a80c59d77e0c2a2f673f92590488804 index.js declared as the package main runs top-level async code on require/import that performs three exfiltration actions against a hardcoded attack...
Malicious code in @hrmony/component-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93efe09ed89a9899669e54f614f80d91a80c59d77e0c2a2f673f92590488804 index.js declared as the package main runs top-level async code on require/import that performs three exfiltration actions against a hardcoded attack...
@apolitical/component-library (>=8.3.5-ac.0, <=8.3.18-beta.0), @novu/nextjs (>=2.5.0, <=3.17.1-rc.1-rc.da35e9062d) +2 more potentially affected by CVE-2026-75510 via @novu/js (>=2.6.3, <=3.17.1-rc.1-rc.da35e9062d)
@novu/js NPM version =2.6.3, =8.3.5-ac.0, =2.5.0, =2.0.0-alpha.0, =2.2.0-rc.2, =3.17.1-rc.1-rc.da35e9062d Source cves: CVE-2026-75510 Source advisory: MEND:CVE-2026-75510...
Malicious code in kickass-component-library (npm)
The package kickass-component-library was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ideainvest-component-library (npm)
The package ideainvest-component-library was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in dunnhumby-component-library (npm)
Source: amazon-inspector 8b047f32f0323beace719a36eec364b2d804d556202950dae7942b04e2f2b09a The package dunnhumby-component-library was found to contain malicious code. Source: ossf-package-analysis 6da13423e5cb44ae4cf9803a0d05a8827cba013c92c5689216dd8a0f3b3e4d43 The OpenSSF Package Analysis projec...
Malicious code in bank-component-library (npm)
The package bank-component-library was found to contain malicious code. --- Credit: OpenSSF source...
Prototype Pollution
Overview @alifd/next is an A configurable component library for web built on React. Affected versions of this package are vulnerable to Prototype Pollution due to the ConfigProvider.getContextProps function in components/dialog/index.tsx. An attacker can modify object prototype attributes by...
MINI-632J-445R-8QX2
Bulletin has no description...
MINI-5C43-RWHW-P77J
Bulletin has no description...
MINI-CMC6-RG78-HFQH
Bulletin has no description...
Exploit for CVE-2026-8206
CVE-2026-8206 Vulnerability: Unauthenticated Account Takeo...
Malicious code in @trp-ii-ii-component-library/ii-components (npm)
--- Credit: OpenSSF source...
Malicious code in @driivz/component-library (npm)
--- Credit: OpenSSF source...
UBUNTU-CVE-2026-16400
Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
UBUNTU-CVE-2026-16369
Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...