@actindo/core-ui (>=1.0.21, <=1.0.28), @actindo/datahub (>=0.0.5, <=0.0.7) +116 more potentially affected by CVE-2026-118257 via vue-i18n (>=11.1.10, <=11.4.13)

vue-i18n NPM version =11.1.10, =1.0.21, =0.0.5, =0.0.1, =0.0.1, =1.0.0, =1.2.0, =0.1.0, =10.2.2, =1.0.1, =2.2.0-app-13.13.1, =6.1.1, =0.1.4-dev.4, =0.1.5-dev.5, =6.2.0-dev.1 and more Source cves: CVE-2026-118257 Source advisory: OSV:GHSA-83RM-6C8R-G728...

@actindo/core-ui (>=1.0.21, <=1.0.28), @actindo/datahub (>=0.0.5, <=0.0.7) +116 more potentially affected by CVE-2026-118257 via vue-i18n (>=11.1.10, <=11.4.13)

vue-i18n NPM version =11.1.10, =1.0.21, =0.0.5, =0.0.1, =0.0.1, =1.0.0, =1.2.0, =0.1.0, =10.2.2, =1.0.1, =2.2.0-app-13.13.1, =6.1.1, =0.1.4-dev.4, =0.1.5-dev.5, =6.2.0-dev.1 and more Source cves: CVE-2026-118257 Source advisory: MEND:CVE-2026-118257...

@acronis-platform/ui-component-library (1.33.0), @actindo/core-ui (>=1.0.1, <=1.0.28) +478 more potentially affected by CVE-2026-118256 via @intlify/core-base (>=10.0.0-alpha.1, <=11.4.13)

@intlify/core-base NPM version =10.0.0-alpha.1, =1.0.1, =0.0.5, =0.0.1, =0.0.1, =0.1.2-next.0605c9e96ea4993e09b4b2b14c6968a9c1c4f952, =1.0.0, =0.8.16, =0.8.16, =0.0.10, =0.1.17, =0.0.1, =0.4.1 - @brdgm/brdgm-commons 1.6.9 - @caroundsky/lemon-admin 1.0.0-alpha.0 and more Source cves: CVE-2026-1182...

Malware in @capsense/core-ui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @capsense/core-ui (npm)

Source: ossf-package-analysis 8392b3f36f3576b4ce8308df7d98e3cfd6b68b6873116743a022c9940ee4515d The OpenSSF Package Analysis project identified '@capsense/core-ui' @ 99.99.100 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious Package

Overview @capsense/core-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-18295 Malicious code in @capsense/core-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd830a923fd6fbe61525c9d152a75384cbd42624a45edc957c2f055ff8fa61a8 @capsense/[email protected] is published to the public npm registry under a scoped name at an implausibly high version, a shape used to override an...

Malicious code in @capsense/core-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd830a923fd6fbe61525c9d152a75384cbd42624a45edc957c2f055ff8fa61a8 @capsense/[email protected] is published to the public npm registry under a scoped name at an implausibly high version, a shape used to override an...

com.github.linyuzai:concept-router-spring-boot-starter (1.1.0), org.webjars.npm:cacheable-request (>=2.1.4, <=7.0.4) +5 more potentially affected by CVE-2026-93748 via org.webjars.npm:http-cache-semantics (>=3.8.1, <=4.2.0)

org.webjars.npm:http-cache-semantics MAVEN version =3.8.1, =2.1.4, =2.1.1, =2.1.1, =3.2.14 Source cves: CVE-2026-93748 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-19964069...

com.github.linyuzai:concept-router-spring-boot-starter (1.1.0), org.webjars.npm:cacheable-request (>=2.1.4, <=7.0.4) +5 more potentially affected by CVE-2026-93750 via org.webjars.npm:http-cache-semantics (>=3.8.1, <=4.2.0)

org.webjars.npm:http-cache-semantics MAVEN version =3.8.1, =2.1.4, =2.1.1, =2.1.1, =3.2.14 Source cves: CVE-2026-93750 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-19964065...

Malicious code in identity-authn-core-ui (npm)

Source: amazon-inspector db734e79e178dd70b53bb814581620da1604a06da4967555160d7dfd0d14e0c5 The package identity-authn-core-ui was found to contain malicious code. Source: ossf-package-analysis 5e1cb9631098da2b7a2ad4216f16c0e3cb2cd82dc7ccadcb4eec27a810012b57 The OpenSSF Package Analysis project...

Malicious code in as-core-ui (npm)

The package as-core-ui was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @neon-i18n/core-ui (npm)

Source: ossf-package-analysis dbdc5bd090d8e85771f77fa3a7a113e08fbfb31de54ae399ed92565bdac246df The OpenSSF Package Analysis project identified '@neon-i18n/core-ui' @ 99.99.99 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with maliciou...

MAL-2026-6667 Malicious code in player-core-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0125c3ddfa61335d33bb6254aa2542b3dc7d561dce6e8fdf7580b28b05cd710 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview player-core-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in player-core-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0125c3ddfa61335d33bb6254aa2542b3dc7d561dce6e8fdf7580b28b05cd710 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in player-core-ui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-5027 Malicious code in @neon-i18n/core-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dbdc5bd090d8e85771f77fa3a7a113e08fbfb31de54ae399ed92565bdac246df The OpenSSF Package Analysis project identified '@neon-i18n/core-ui' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

Malicious code in @neon-i18n/core-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dbdc5bd090d8e85771f77fa3a7a113e08fbfb31de54ae399ed92565bdac246df The OpenSSF Package Analysis project identified '@neon-i18n/core-ui' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

Malicious code in @cbreone/core-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e204888ba2b9573e474d804f28f51173684bb25f640615a9eaae217c5e1a45 The package @cbreone/core-ui was found to contain malicious code...