Malicious code in @ks-cqc/fingerprint-generator (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @ks-cqc/h5-sig4 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16524 Malicious code in @ks-cqc/h5-sig4 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16523 Malicious code in @ks-cqc/fingerprint-generator (npm)

--- -= Per source details. Do not edit below this line.=-...

bitcoinq (0.0.1), bitdust-p2p (>=0.0.2, <=0.0.3) +28 more potentially affected by CVE-2026-42304 via twisted (20.3.0)

twisted PYPI version 20.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - bitcoinq 0.0.1 - bitdust-p2p =0.0.2, =0.3.4, =3.2.2, =0.3.0a0, =0.1.0, =0.2.0, =1.0.0, =0.5.0, =0.9.0, =2.1.0b2, =1.0.2, =1.0.9 - pade 2.2.4 and...

cqc (>=3.1.0, <=3.2.1), nucypher (>=1.2.0b2, <=2.0.0b11) +5 more potentially affected by CVE-2026-42304 via twisted (19.10.0)

twisted PYPI version 19.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - cqc =3.1.0, =1.2.0b2, =0.5.5, =0.0.1, =3.0.7, =3.0.14 - txsshadmin 0.2.0 Source cves: CVE-2026-42304 Source advisory: OSV:PYSEC-2026-160...

cqc (>=3.1.0, <=3.2.1), nucypher (>=1.2.0b2, <=2.0.0b11) +5 more potentially affected by CVE-2026-42304 via twisted (19.10.0)

twisted PYPI version 19.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - cqc =3.1.0, =1.2.0b2, =0.5.5, =0.0.1, =3.0.7, =3.0.14 - txsshadmin 0.2.0 Source cves: CVE-2026-42304 Source advisory: OSV:GHSA-GRGV-6HW6-V9G4...

bitcoinq (0.0.1), bitdust-p2p (>=0.0.2, <=0.0.3) +28 more potentially affected by CVE-2026-42304 via twisted (20.3.0)

twisted PYPI version 20.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - bitcoinq 0.0.1 - bitdust-p2p =0.0.2, =0.3.4, =3.2.2, =0.3.0a0, =0.1.0, =0.2.0, =1.0.0, =0.5.0, =0.9.0, =2.1.0b2, =1.0.2, =1.0.9 - pade 2.2.4 and...

GHSA-4V9X-CQC5-J645

creationtimestamp| type| source ---|---|--- 2026-04-24 15:22:27+00:00| published-proof-of-concept| Telegram/lvQKk-ZCMh3Q3qpeojegtiwsEvYSJJ9oeMubqB3D8wrl-U...

cqc (>=3.1.0, <=3.2.1), nucypher (>=1.2.0b2, <=2.0.0b11) +5 more potentially affected by CVE-2024-41810 via twisted (19.10.0)

twisted PYPI version 19.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - cqc =3.1.0, =1.2.0b2, =0.5.5, =0.0.1, =3.0.7, =3.0.14 - txsshadmin 0.2.0 Source cves: CVE-2024-41810 Source advisory: OSV:GHSA-CF56-G6W6-PQQ2...

cqc (>=3.1.0, <=3.2.1), nucypher (>=1.2.0b2, <=2.0.0b11) +5 more potentially affected by CVE-2024-41810 via twisted (19.10.0)

twisted PYPI version 19.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - cqc =3.1.0, =1.2.0b2, =0.5.5, =0.0.1, =3.0.7, =3.0.14 - txsshadmin 0.2.0 Source cves: CVE-2024-41810 Source advisory: OSV:PYSEC-2024-75...

cqc (>=3.1.0, <=3.2.1), nucypher (>=1.2.0b2, <=2.0.0b11) +5 more potentially affected by CVE-2023-46137 via twisted (19.10.0)

twisted PYPI version 19.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - cqc =3.1.0, =1.2.0b2, =0.5.5, =0.0.1, =3.0.7, =3.0.14 - txsshadmin 0.2.0 Source cves: CVE-2023-46137 Source advisory: OSV:PYSEC-2023-224...