CVE-2026-30631

An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 2025-09-11 allowing attackers to execute arbitrary code via crafted path to computerwritefile...

CVE-2026-30631

An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 2025-09-11 allowing attackers to execute arbitrary code via crafted path to computerwritefile...

CVE-2026-30631

An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 2025-09-11 allowing attackers to execute arbitrary code via crafted path to computerwritefile...

CVE-2026-30631

The software bytebot-ai contains a vulnerability (introduced in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313) that allows for arbitrary code execution . This is caused by the improper neutralization of special elements used in an OS command, specifically when an attacker provides a crafted pat...

MAL-2026-10853 Malicious code in @gocortexio/npmgremlinbox-typosquat-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9195f06446d35d2bfefdd565bd2c6f88680cd808d77ff00b4ff0b295cc84110 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10850 Malicious code in @gocortexio/npmgremlinbox-tapr-ohl-1-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0fbd65fb65b76a2422d3780b7c2c82554753c78740a272f5c064d40fa239437 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10844 Malicious code in @gocortexio/npmgremlinbox-polyform-noncommercial-1-0-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 468bf7ae3a725d97b503a456cd1c3baa627f82d8798b6ce91acad9f0dd20e9e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10823 Malicious code in @gocortexio/npmgremlinbox-fdk-aac (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6207192112f56fc40eade4e0eaad3581eef98f723337ff802ec60e569ab6bba8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10826 Malicious code in @gocortexio/npmgremlinbox-hippocratic-2-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d13f8be8bd96cc8167ca9ad536b00b72d817c2acb8f6c8a93362f2e932b5e63e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10811 Malicious code in @gocortexio/npmgremlinbox-cdla-sharing-1-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 207ce77b5e26124b1bb278d49c1a097fd935b38b7c1ad819c3aa0c012b8d9cc3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10804 Malicious code in @gocortexio/npmgremlinbox-cc-by-nd-3-0-de (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cd5150ef70be854d88218dbce350dae84fd41c7d7742673b2866be095c6a643 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10809 Malicious code in @gocortexio/npmgremlinbox-cc-by-sa-4-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbb7c4b37d26321a43dd2b0ea06e7043e8e265c27876e80d5f62a2979f763509 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10797 Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-nd-3-0-de (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e285fcafad462340d980568e8c345cbc9e879d2d9ee5cb2c61fb46a97e6de73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10807 Malicious code in @gocortexio/npmgremlinbox-cc-by-sa-3-0-at (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a567f9fda6a70475cc32be7b5392bbc1a3c1787b8323c1ff2bc6c237e198fdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10808 Malicious code in @gocortexio/npmgremlinbox-cc-by-sa-3-0-de (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89b99be8fcb87a9c06989edb3b62e804fa2ebea83cd48b65eeac6b57f1636629 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10799 Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-sa-2-0-de (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2ec8b494d13d9e9c582f801e1fa46d371b6810b130a93614926880e26b4bcc Package @gocortexio/[email protected] was scanned with 4 files inspected. No a static rule matches and no behavioral findings we...

MAL-2026-10800 Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-sa-2-0-fr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 933588b9a5c2cea515a44021ac2f30bdd62c252222765b83873fb0722afb931c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10802 Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-sa-3-0-de (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68161a49a3b8e2933eedf9545f29048260a979f1a2c77dde57c806c9ec7d0179 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gocortexio/npmgremlinbox-agpl-3-0-or-later (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22de3b316748990f8d632fd0fa7ca312c4f5fd38ddf61986331ae0ad4c14280b No a static rule matches and no traced behavioral findings for this package version. Nothing in the scanned files indicates exfiltration, install-tim...

MAL-2026-10791 Malicious code in @gocortexio/npmgremlinbox-artistic-1-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a54621aca82e78e4ee4adc57b3925274a0c7bf3b2d11d6d5af655c584de7fa45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...