Lucene search
+L

315800 matches found

OSV
OSV
added 2 days ago4 views

MAL-2026-11804 Malicious code in @qlik/sdk (npm)

npm/@qlik/sdk is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by the wo...

6.4AI score
SaveExploits0References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2 days ago5 views

Malicious code in @qlik/eslint-config (npm)

npm/@qlik/eslint-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished...

5.6AI score
SaveExploits0References6
OSV
OSV
added 2 days ago4 views

MAL-2026-11809 Malicious code in @qlik/sprout-react-table (npm)

npm/@qlik/sprout-react-table is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

6.3AI score
SaveExploits0References6
OSV
OSV
added 2 days ago3 views

MAL-2026-11582 Malicious code in @nebula.js/sn-tabbed-container (npm)

npm/@nebula.js/sn-tabbed-container is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.5AI score
SaveExploits0References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2 days ago3 views

Malicious code in @nebula.js/sn-action-button (npm)

npm/@nebula.js/sn-action-button is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References6
Cvelist
Cvelist
added 2 days ago33 views

CVE-2026-15337 Potential denial-of-service vulnerability in check_for_language()

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...

6.9CVSS0.00521EPSS
SaveExploits0References7
CVE
CVE
added 2 days ago26 views

CVE-2026-15337

Technical details are not publicly available in the provided documents. Monitor for updates.

6.9CVSS5.4AI score0.00521EPSS
SaveExploits0References7
OSSF Malicious Packages
OSSF Malicious Packages
added 2 days ago6 views

Malicious code in @qlik/embed-react (npm)

npm/@qlik/embed-react is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished b...

5.6AI score
SaveExploits0References6
OSV
OSV
added 2 days ago4 views

MAL-2026-11789 Malicious code in @qlik/embed-react (npm)

npm/@qlik/embed-react is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished b...

5.6AI score
SaveExploits0References6
OSV
OSV
added 2 days ago4 views

MAL-2026-11565 Malicious code in @nebula.js/cli (npm)

npm/@nebula.js/cli is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by t...

5.5AI score
SaveExploits0References6
OSV
OSV
added 2 days ago4 views

MAL-2026-11625 Malicious code in @onereach/regular-expressions-test (npm)

npm/@onereach/regular-expressions-test is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized...

5.7AI score
SaveExploits0References8
OSSF Malicious Packages
OSSF Malicious Packages
added 2 days ago5 views

Malicious code in @qlik/design-tokens (npm)

npm/@qlik/design-tokens is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished...

6AI score
SaveExploits0References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2 days ago5 views

Malicious code in @nebula.js/locale (npm)

npm/@nebula.js/locale is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished b...

5.9AI score
SaveExploits0References6
OSV
OSV
added 2 days ago3 views

MAL-2026-11577 Malicious code in @nebula.js/sn-map (npm)

npm/@nebula.js/sn-map is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished b...

5.8AI score
SaveExploits0References6
OSV
OSV
added 2 days ago3 views

MAL-2026-11578 Malicious code in @nebula.js/sn-nav-menu (npm)

npm/@nebula.js/sn-nav-menu is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2 days ago5 views

Malicious code in @onereach/postcss-scoped-selector (npm)

npm/@onereach/postcss-scoped-selector is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized a...

5.9AI score
SaveExploits0References8
OSSF Malicious Packages
OSSF Malicious Packages
added 2 days ago4 views

Malicious code in @servicetitan/feature-spotlight (npm)

npm/@servicetitan/feature-spotlight is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References12
OSV
OSV
added 2 days ago3 views

MAL-2026-11988 Malicious code in tslint-folder-schema (npm)

npm/tslint-folder-schema is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republishe...

5.8AI score
SaveExploits0References21
OSV
OSV
added 2 days ago3 views

MAL-2026-11866 Malicious code in @servicetitan/examples (npm)

npm/@servicetitan/examples is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References12
OSV
OSV
added 2 days ago3 views

MAL-2026-11834 Malicious code in @servicetitan/carto-charts-rn (npm)

npm/@servicetitan/carto-charts-rn is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

6.5AI score
SaveExploits0References12
Rows per page
Query Builder