Malicious code in @dgxeon/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431d9b11b162e92f20bd17a9dfcc9f722baf4fb83f1d813d4f5ab29c590f837f The package @dgxeon/libsignal-node was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1076 Malicious code in dgxeon-soket3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4804daec11623ef53c11da649a8621bd07ecb9009851a230b31d0c19adbef142 The package dgxeon-soket3 was found to contain malicious code. Source: ghsa-malware e6e291783a21c3b17598b212cf3376e3ea329d11ddea7783d88a5b6031f03304...

MAL-2026-1079 Malicious code in sokettry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac50f59f66c4ffc9549baba61f562df6aef0920c46e97558d4a779d71d57c19 The package sokettry was found to contain malicious code. Source: ghsa-malware c2bfdd42a184b2800805e5560a0133b4582704439a23bdc8e613bb03eceb263f Any...

MAL-2026-1075 Malicious code in dgxeon-soket2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 833766a284022eb1ea516ee081a4cec3c5153b1bbec222238d7e676876acf10c The package dgxeon-soket2 was found to contain malicious code. Source: ghsa-malware d7bc58675189e4ecaf6f63610f5f5a05aebb80d0f3cb8bd1247fc9876a7bd13b...

MAL-2026-1077 Malicious code in dgxeon-soket4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38e017a1a49fe2e8fa61441a0f35d77a1b7052475fffefecca2fa4248a54c58 The package dgxeon-soket4 was found to contain malicious code. Source: ghsa-malware 1efad9e444be88f0b8912153564d4feb2b0dff3063ec3bb5f0750731faec1057...

Malicious code in dgxeon-soket3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4804daec11623ef53c11da649a8621bd07ecb9009851a230b31d0c19adbef142 The package dgxeon-soket3 was found to contain malicious code. Source: ghsa-malware e6e291783a21c3b17598b212cf3376e3ea329d11ddea7783d88a5b6031f03304...

Malicious code in sokettry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac50f59f66c4ffc9549baba61f562df6aef0920c46e97558d4a779d71d57c19 The package sokettry was found to contain malicious code. Source: ghsa-malware c2bfdd42a184b2800805e5560a0133b4582704439a23bdc8e613bb03eceb263f Any...

Malicious code in @skyzopedia/baileys-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e18d9edfd38013956ad5cb33113c6fabf0249e92b69ba1161f98f8610485cfd The package @skyzopedia/baileys-pro was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1069 Malicious code in @skyzopedia/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2851df7c45fca156556e4b7c5fef4c60ed254a43c4e6e51c6e02d8b5ca5a20 The package @skyzopedia/libsignal-node was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1062 Malicious code in express-core-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4917c569276f08ce3f25d5426d0621945c0664c14badaff37739cde37fba05b The package express-core-validator was found to contain malicious code. Source: ghsa-malware...

Malicious code in jest-param-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f5050070ee0637ff34403bfa22fe7464561a421a99410e084c74e1bd023b08 The package jest-param-validator was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1046 Malicious code in jest-param-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f5050070ee0637ff34403bfa22fe7464561a421a99410e084c74e1bd023b08 The package jest-param-validator was found to contain malicious code. Source: ghsa-malware...

Cross-site Scripting (XSS)

Overview @angular/core is a package that lets you write client-side web applications as if you had a smarter browser. It also lets you use HTML as your template language and lets you extend HTML’s syntax to express your application’s components clearly and succinctly. Affected versions of this...

DEBIAN-CVE-2026-27970

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Versions prior to 21.2.0, 21.1.16, 20.3.17, and 19.2.19 have a cross-Site scripting vulnerability in the Angular internationalization i18n pipeline. In ICU messages...

UBUNTU-CVE-2026-27970

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Versions prior to 21.2.0, 21.1.16, 20.3.17, and 19.2.19 have a cross-Site scripting vulnerability in the Angular internationalization i18n pipeline. In ICU messages...

CVE-2026-27970 Angular i18n vulnerable to Cross-Site Scripting (XSS)

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Versions prior to 21.2.0, 21.1.16, 20.3.17, and 19.2.19 have a cross-Site scripting vulnerability in the Angular internationalization i18n pipeline. In ICU messages...

CVE-2026-27970

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Versions prior to 21.2.0, 21.1.16, 20.3.17, and 19.2.19 have a cross-Site scripting vulnerability in the Angular internationalization i18n pipeline. In ICU messages...

CVE-2026-27970

Angular CVE-2026-27970 affects multiple older Angular releases (e.g., 21.2.0, 21.1.16, 20.3.17, 19.2.19) with an XSS in the i18n ICU message pipeline due to inadequate sanitization of HTML from translated content. An attacker must first compromise the translation file (xliff/xtb, etc.) and then l...

PT-2026-22110

Name of the Vulnerable Software and Affected Versions Angular versions prior to 21.2.0 Angular versions prior to 21.1.16 Angular versions prior to 20.3.17 Angular versions prior to 19.2.19 Description Angular’s internationalization i18n pipeline contains a cross-site scripting issue. HTML within...

Malicious code in duer-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6a00caf26e2e34291c939e8d0351324c884ba9d9c5b74e5cb9c8d78177a999 The package duer-js was found to contain malicious code. Source: ghsa-malware e7255816711503f7b2f4febb10e3d2d8ef36d2e3067366ece224ad3816fbf03c Any...