@cafeai/cafe-code (0.0.28), @dualityinstitute/blink (>=0.0.1, <=0.0.19) +10 more potentially affected by CVE-2026-102674 via electron (>=41.0.3, <=41.10.5)

electron NPM version =41.0.3, =0.0.1, =1.4.2, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.2.2, =1.3.5 Source cves: CVE-2026-102674 Source advisory: OSV:GHSA-GR2M-V5GQ-V685...

@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +12 more potentially affected by CVE-2026-102674 via electron (>=42.0.0, <=42.7.1)

electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.10.0, =0.1.4, =0.1.2, =0.1.1, =0.3.75, =0.3.91 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102674 Source advisory: GHSA-GR2M-V5GQ-V685...

@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +12 more potentially affected by CVE-2026-102674 via electron (>=42.0.0, <=42.7.1)

electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.10.0, =0.1.4, =0.1.2, =0.1.1, =0.3.75, =0.3.91 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102674 Source advisory: SNYK:JS-ELECTRON-20335494...

@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +12 more potentially affected by CVE-2026-102675 +1 more via electron (>=42.0.0, <=42.7.1)

electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.10.0, =0.1.4, =0.1.2, =0.1.1, =0.3.75, =0.3.91 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102675, CVE-2026-70604 Source advisory: GHSA-J84W-JFHQ-VHVJ...

@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +12 more potentially affected by CVE-2026-102675 via electron (>=42.0.0, <=42.7.1)

electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.10.0, =0.1.4, =0.1.2, =0.1.1, =0.3.75, =0.3.91 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102675 Source advisory: OSV:GHSA-J84W-JFHQ-VHVJ...

@0x-copilot/cli (>=0.2.1, <=0.3.0), @ascua/electron (>=0.19.0, <=0.26.0) +31 more potentially affected by CVE-2026-102675 +1 more via electron (>=43.0.0-beta.3, <=43.4.0)

electron NPM version =43.0.0-beta.3, =0.2.1, =0.19.0, =0.1.0, =9.10.29-beta.1, =9.10.29-beta.1, =6.7.0, =0.4.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =5.0.18-rc.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-102675, CVE-2026-70604 Source advisory: GHSA-J84W-JFHQ-VHVJ...

@cafeai/cafe-code (0.0.28), @dualityinstitute/blink (>=0.0.1, <=0.0.19) +10 more potentially affected by CVE-2026-102675 via electron (>=41.0.3, <=41.10.5)

electron NPM version =41.0.3, =0.0.1, =1.4.2, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.2.2, =1.3.5 Source cves: CVE-2026-102675 Source advisory: OSV:GHSA-J84W-JFHQ-VHVJ...

@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +12 more potentially affected by CVE-2026-102676 via electron (>=42.0.0, <=42.7.1)

electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.10.0, =0.1.4, =0.1.2, =0.1.1, =0.3.75, =0.3.91 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102676 Source advisory: OSV:GHSA-9QH4-3JW8-366W...

@cafeai/cafe-code (0.0.28), @dualityinstitute/blink (>=0.0.1, <=0.0.19) +10 more potentially affected by CVE-2026-102676 via electron (>=41.0.3, <=41.10.5)

electron NPM version =41.0.3, =0.0.1, =1.4.2, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.2.2, =1.3.5 Source cves: CVE-2026-102676 Source advisory: SNYK:JS-ELECTRON-20335447...

@0x-copilot/cli (>=0.2.1, <=0.3.0), @ascua/electron (>=0.19.0, <=0.26.0) +31 more potentially affected by CVE-2026-102676 via electron (>=43.0.0-beta.3, <=43.4.0)

electron NPM version =43.0.0-beta.3, =0.2.1, =0.19.0, =0.1.0, =9.10.29-beta.1, =9.10.29-beta.1, =6.7.0, =0.4.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =5.0.18-rc.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-102676 Source advisory: GHSA-9QH4-3JW8-366W...

@0x-copilot/cli (>=0.2.1, <=0.3.0), @ascua/electron (>=0.19.0, <=0.26.0) +36 more potentially affected by CVE-2026-102677 via electron (>=43.0.0-beta.3, <=43.4.1)

electron NPM version =43.0.0-beta.3, =0.2.1, =0.19.0, =0.1.0, =9.10.29-beta.1, =9.10.29-beta.1, =6.7.0, =0.4.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =5.0.18-rc.1, =5.0.18 and more Source cves: CVE-2026-102677 Source advisory: SNYK:JS-ELECTRON-20335433...

@1-click/shared-lib (0.0.1), @20206205tech/nestjs-auth (>=1.0.0, <=1.4.1) +865 more potentially affected by unknown CVE via js-yaml (>=5.0.0, <=5.4.0)

js-yaml NPM version =5.0.0, =1.0.0, =0.3.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =1.1.0, =16.21.1, =1.9.29, =6.29.8, =3.4.141, =7.1.20, =2.2.62, =2.2.73 and more Source cves: unknown CVE Source advisory: GHSA-R3PH-W7GJ-G6XM...

a2 (>=0.1.0, <=0.7.0), a2grunnerp (>=0.1.0, <=0.1.8) +1429 more potentially affected by CVE-2026-49265 via oauthlib (>=3.0.0, <=3.3.1)

oauthlib PYPI version =3.0.0, =0.1.0, =0.1.0, =1.0.32, =0.1.0, =3.2.1, =0.2.0, =3.2.0, =1.1.0, =0.1.31, =1.0.0, =0.0.8, =0.0.1, =1.1.73b0, =0.1.0, =2.2.0 and more Source cves: CVE-2026-49265 Source advisory: GHSA-XPV3-W29H-X7CV...

@chrysb/alphaclaw (>=0.9.35-beta.0, <=0.9.36), @moltzap/simulator (>=2026.902.0, <=2026.922.3) +1 more potentially affected by CVE-2026-102807 via openclaw (>=2026.8.1, <=2026.9.3)

openclaw NPM version =2026.8.1, =0.9.35-beta.0, =2026.902.0, =1.0.0, =1.2.8 Source cves: CVE-2026-102807 Source advisory: MEND:CVE-2026-102807...

@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +12 more potentially affected by CVE-2026-102675 via electron (>=42.0.0, <=42.7.1)

electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.10.0, =0.1.4, =0.1.2, =0.1.1, =0.3.75, =0.3.91 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102675 Source advisory: MEND:CVE-2026-102675...

0.app1 (1.0.52), 0.edsql (>=1.0.49, <=1.0.50) +3067 more potentially affected by CVE-2026-102674 via electron (>=0.1.2, <=41.10.5)

electron NPM version =0.1.2, =1.0.49, =1.0.49, =1.0.49, =1.0.1, =0.0.10, =1.0.2, =1.1.11, =0.1.0, =1.0.1 - @aaquib/whatsasenanpm 1.3.5 - @aaronngray/electron-spawn 5.0.0 and more Source cves: CVE-2026-102674 Source advisory: MEND:CVE-2026-102674...

@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +11 more potentially affected by CVE-2026-102673 via electron (>=42.0.0, <=42.4.1)

electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.10.0, =0.1.4, =0.1.2, =0.1.1, =0.1.20 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102673 Source advisory: MEND:CVE-2026-102673...

0.app1 (1.0.52), 0.edsql (>=1.0.49, <=1.0.50) +3066 more potentially affected by CVE-2026-102673 via electron (>=0.1.2, <=41.10.3)

electron NPM version =0.1.2, =1.0.49, =1.0.49, =1.0.49, =1.0.1, =0.0.10, =1.0.2, =1.1.11, =0.1.0, =1.0.1 - @aaquib/whatsasenanpm 1.3.5 - @aaronngray/electron-spawn 5.0.0 and more Source cves: CVE-2026-102673 Source advisory: MEND:CVE-2026-102673...

MAL-2026-17253 Malicious code in @hrmony/benefit-essenszuschuss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a91973dc3a793ffab820317714931c69f1a992ac1ebef3f80d8028976959939 On module import, top-level code in this package harvests cloud and container secrets and posts them to a hardcoded attacker-controlled endpoint. It...

Malicious code in @hrmony/benefit-essenszuschuss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a91973dc3a793ffab820317714931c69f1a992ac1ebef3f80d8028976959939 On module import, top-level code in this package harvests cloud and container secrets and posts them to a hardcoded attacker-controlled endpoint. It...