52526 matches found
CVE-2026-27574: Improper Control of Generation of Code
OneUptime is a solution for monitoring and managing online services. In versions 9.5.13 and below, custom JavaScript monitor feature uses Node.js's node:vm module explicitly documented as not a security mechanism to execute user-supplied code, allowing trivial sandbox escape via a well-known...
PT-2026-21354
Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description A flaw exists in Moodle’s backup restore functionality where specially crafted backup files are not properly validated during processing. Restoring a malicious backup file could lead to the...
CVE-2026-26045: Improper Control of Generation of Code
A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is restored, it could lead to unintended execution of server-side code. Since restore capabilities are typically available ...
Malicious code in rollup-plugin-polyfill-swc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0f8211aafc83248f37c6f92d0be49953ca3a84aa2394b4aa8f5cd67f605a7e The package rollup-plugin-polyfill-swc was found to contain malicious code. Source: ghsa-malware...
MAL-2026-976 Malicious code in rollup-plugin-polyfill-swc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0f8211aafc83248f37c6f92d0be49953ca3a84aa2394b4aa8f5cd67f605a7e The package rollup-plugin-polyfill-swc was found to contain malicious code. Source: ghsa-malware...
Malicious code in detect-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7bb76ced9a07af5292a6e90596305f844da2d89fc98329431d360797c4b1d4 The package detect-cache was found to contain malicious code. Source: ghsa-malware 136a28b5b046aa8efe7f9f0084f8f700650cdca446449494ec58b8414886f0a0 A...
MAL-2026-972 Malicious code in uudi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdb12754a69bd912f7d51fb243c65d7c681cc0e15a17b561e0a491dd49dbb095 The package uudi was found to contain malicious code. Source: ghsa-malware f7b138cbc39567b6578a6cd48c9b8c7384a2bf7623d0d4542c9e37a1960b329b Any...
MAL-2026-963 Malicious code in locale-loader-pro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cfe4223d443a4180a9c6113449817f38d1d72fcd6f2f4cb42525dcb391c82b5 The package locale-loader-pro was found to contain malicious code. Source: ghsa-malware...
Malicious code in naniod (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770f12de16c059d53c80a9f7e99035fcf1f454cefcedcf6ad4e7893e8a775726 The package naniod was found to contain malicious code. Source: ghsa-malware 5956bf743e4cd707100421a35c80a88d7dfd99a213b2c584c50b27bcf12e0952 Any...
Malicious code in locale-loader-pro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cfe4223d443a4180a9c6113449817f38d1d72fcd6f2f4cb42525dcb391c82b5 The package locale-loader-pro was found to contain malicious code. Source: ghsa-malware...
MAL-2026-955 Malicious code in crypto-locale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e346cfc58b0d84fb5b56985729f7ec92a226ef106b0ab10f299e65a62028834d The package crypto-locale was found to contain malicious code. Source: ghsa-malware 00686734db6a3f5477c1047f779749296dddb0c7eab5294000e13ed7b194c74d...
MAL-2026-964 Malicious code in naniod (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770f12de16c059d53c80a9f7e99035fcf1f454cefcedcf6ad4e7893e8a775726 The package naniod was found to contain malicious code. Source: ghsa-malware 5956bf743e4cd707100421a35c80a88d7dfd99a213b2c584c50b27bcf12e0952 Any...
Malicious code in crypto-locale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e346cfc58b0d84fb5b56985729f7ec92a226ef106b0ab10f299e65a62028834d The package crypto-locale was found to contain malicious code. Source: ghsa-malware 00686734db6a3f5477c1047f779749296dddb0c7eab5294000e13ed7b194c74d...
Malicious code in ethres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba3cafe0e65ebbd1b4bdd577f7277b921eb7e3cf52e5fb46d8e6f6f34b2debd5 The package ethres was found to contain malicious code. Source: ghsa-malware 10924cf4fae0e118a99b95cf45376a7f42ff743f1e8830e78e801c473e0ddd88 Any...
Malicious code in format-defaults (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00cab7061e49ab4c27f149d8944dbf016be470f0a6380b58d1432ce3c5dfd04 The package format-defaults was found to contain malicious code. Source: ghsa-malware 90aea488bdca1dafac7912501be1bdfb01e2304e4a110715802f98994f2c712...
MAL-2026-960 Malicious code in hardhta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc27417b62c3ad399e369577764608120ee2b3662367f1d51bf5fb8378560bcf The package hardhta was found to contain malicious code. Source: ghsa-malware e4174e96a92d9c0d7bbe499ed40d2e4cab9635c61471a1602fd117d8115e2d38 Any...
Malicious code in node-native-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9503b92533dc98c475b75c09a1c40fcec67ad7b56c488b9677c0ff0740c4d2 The package node-native-bridge was found to contain malicious code. Source: ghsa-malware...
MAL-2026-956 Malicious code in crypto-reader-info (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e31fe14a706d54aaad373a2174a83c58af8a065a0e8e5c98c201e3b986430d The package crypto-reader-info was found to contain malicious code. Source: ghsa-malware...
MAL-2026-970 Malicious code in secp256 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5474e89cc8b0f2d2e5c37d3a2bad92455e82535d614d82fb0ff96979ba1ac2d3 The package secp256 was found to contain malicious code. Source: ghsa-malware 12775af1dc40ed0560ed3a8265ad9a1c9a122b3860a9f081e190b2ad8f30ba5d Any...
Malicious code in crypto-reader-info (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e31fe14a706d54aaad373a2174a83c58af8a065a0e8e5c98c201e3b986430d The package crypto-reader-info was found to contain malicious code. Source: ghsa-malware...