Malicious code in @dransay/secrets (npm)

Source: amazon-inspector aef0f6b36413e45664391c5341f7c30a4501c2cc916add9ba6525bf57e559d51 The package declares a preinstall script that runs beacon.js, which performs a DNS lookup and HTTPS GET to a hardcoded Interactsh collector host db3klhbi6i9hark1kegg174t38h33b6wt.oast.site at npm install tim...

Malicious code in dransay (npm)

Source: amazon-inspector 46d06d0ce82913346840f676660d67f9838f48511e58eef793bfe7c52091071f [email protected] declares a preinstall lifecycle script that runs node beacon.js, which performs a DNS lookup and HTTPS GET against a hardcoded Interactsh oast.site collaborator subdomain...

@aliceo2/bookkeeping (>=0.27.0, <=1.20.0), @azteam/mysql-model (>=1.0.70, <=1.0.158) +62 more potentially affected by CVE-2026-107383 via mariadb (>=3.0.0, <=3.2.3)

mariadb NPM version =3.0.0, =0.27.0, =1.0.70, =2.0.0, =0.0.1, =1.0.0-alpha.0, =0.0.6, =1.1.0, =1.1.1, =1.1.2 - @keystone-6-master/example-assets-cloud 0.0.2 - @keystone-6-master/example-assets-local 0.0.2 - @keystone-6-master/example-auth 0.0.3 - @keystone-6-master/example-blog 0.0.2 -...

4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +4451 more potentially affected by CVE-2026-106446 via handlebars (>=4.0.0, <=4.7.9)

handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-106446 Source advisory: OSV:GHSA-8R5X-FM3F-WHWJ...

@biztory/n8n-nodes-tableau-rest-api (>=0.1.13, <=0.1.14), @easynet/n8n-local (0.0.37) +19 more potentially affected by CVE-2026-106119 via @langchain/mongodb (>=1.0.1, <=1.1.0)

@langchain/mongodb NPM version =1.0.1, =0.1.13, =2.35.2, =2.32.7, =2.32.0, =2.34.0, =0.1.4, =23.1.4, =3.1.0, =2.32.0, =0.0.1, =0.0.10 and more Source cves: CVE-2026-106119 Source advisory: OSV:GHSA-M6RX-H84Q-8R95...

@biztory/n8n-nodes-tableau-rest-api (>=0.1.13, <=0.1.14), @easynet/n8n-local (0.0.37) +19 more potentially affected by CVE-2026-106119 via @langchain/mongodb (>=1.0.1, <=1.1.0)

@langchain/mongodb NPM version =1.0.1, =0.1.13, =2.35.2, =2.32.7, =2.32.0, =2.34.0, =0.1.4, =23.1.4, =3.1.0, =2.32.0, =0.0.1, =0.0.10 and more Source cves: CVE-2026-106119 Source advisory: GHSA-M6RX-H84Q-8R95...

MAL-2026-17701 Malicious code in @kxafunc/xbails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629c665fbfef767c56d24af935d38312f7aa88d1c71d9dfb8c427192e54add0b package.json aliases the libsignal dependency to npm:@bellaxchuu/libsignal-node@latest — a non-standard publisher pinned to the mutable latest dist-t...

a13n-harness (0.0.3), a13n-stream-protocol (0.0.3) +72 more potentially affected by CVE-2026-107287 via pydantic-ai-slim (>=2.0.0b1, <=2.51.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =0.1.0, =0.1.0, =2.1.0, =0.3.0, =0.0.0, =0.0.0, =0.1.9.62, =0.2.1, =1.1.0, =2.39.1 and more Source cves: CVE-2026-107287 Source advisory: GHSA-V36G-JCW9-X7CW...

agent-utilities (>=0.41.0, <=0.51.0), clai (>=1.77.0, <=1.107.6) +37 more potentially affected by CVE-2026-107287 via pydantic-ai-slim (>=1.77.0, <=1.107.6)

pydantic-ai-slim PYPI version =1.77.0, =0.41.0, =1.77.0, =0.0.445, =1.0.0, =1.1.0, =1.0.25, =0.1.102, =26.1.0, =0.1.1, =0.2.0, =0.2.1 - jupydeep 0.1.6 and more Source cves: CVE-2026-107287 Source advisory: GHSA-V36G-JCW9-X7CW...

@forwardemail/wildduck (>=1.40.10, <=4.0.3), @johnqh/haraka (>=8.0.1, <=8.0.17) +13 more potentially affected by CVE-2026-107300 via msgpack5 (>=6.0.1, <=6.0.2)

msgpack5 NPM version =6.0.1, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =1.0.0, =1.0.0-alpha.1, =5.8.30, =0.0.1, =1.46.1, =1.32.21, =2.60.1, =1.1.0, =1.38.0, =1.1.0, =1.32.21 Source cves: CVE-2026-107300 Source advisory: GHSA-5X5G-H9X8-2FH9...

@forwardemail/wildduck (>=1.40.10, <=4.0.3), @johnqh/haraka (>=8.0.1, <=8.0.17) +13 more potentially affected by CVE-2026-107299 via msgpack5 (>=6.0.1, <=6.0.2)

msgpack5 NPM version =6.0.1, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =1.0.0, =1.0.0-alpha.1, =5.8.30, =0.0.1, =1.46.1, =1.32.21, =2.60.1, =1.1.0, =1.38.0, =1.1.0, =1.32.21 Source cves: CVE-2026-107299 Source advisory: GHSA-26WQ-P25C-J6FV...

@forwardemail/wildduck (>=1.40.10, <=4.0.3), @johnqh/haraka (>=8.0.1, <=8.0.17) +13 more potentially affected by CVE-2026-107298 via msgpack5 (>=6.0.1, <=6.0.2)

msgpack5 NPM version =6.0.1, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =1.0.0, =1.0.0-alpha.1, =5.8.30, =0.0.1, =1.46.1, =1.32.21, =2.60.1, =1.1.0, =1.38.0, =1.1.0, =1.32.21 Source cves: CVE-2026-107298 Source advisory: SNYK:JS-MSGPACK5-20581656...

@forwardemail/wildduck (>=1.40.10, <=4.0.3), @johnqh/haraka (>=8.0.1, <=8.0.17) +13 more potentially affected by CVE-2026-107296 via msgpack5 (>=6.0.1, <=6.0.2)

msgpack5 NPM version =6.0.1, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =1.0.0, =1.0.0-alpha.1, =5.8.30, =0.0.1, =1.46.1, =1.32.21, =2.60.1, =1.1.0, =1.38.0, =1.1.0, =1.32.21 Source cves: CVE-2026-107296 Source advisory: OSV:GHSA-QW35-55VC-RHGJ...

acpkit (>=1.5.0, <=1.6.1), atomicguard (>=1.1.0, <=2.39.1) +21 more potentially affected by CVE-2026-107292 via pydantic-ai-slim (>=2.0.0b1, <=2.29.0)

pydantic-ai-slim PYPI version =2.0.0b1, =1.5.0, =1.1.0, =2.0.0b1, =1.0.67, =0.1.0, =0.1.0rc0, =0.7.0rc2, =0.0.2, =0.1.12, =0.20.0, =1.0.0, =1.0.0, =2.0.0b1, =2.0.0b1, =2.29.0 and more Source cves: CVE-2026-107292 Source advisory: GHSA-Q2XC-RRXJ-58X9...

ara-cli (>=0.1.14.13, <=0.1.14.14), auto-browse (>=0.0.2, <=0.0.5) +32 more potentially affected by CVE-2026-107292 via pydantic-ai (>=1.34.0, <=1.107.4)

pydantic-ai PYPI version =1.34.0, =0.1.14.13, =0.0.2, =1.34.0, =1.0.0, =1.0.0, =0.1.102, =26.0.0, =0.2.0, =0.1.0, =0.1.71, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2026-107292 Source advisory: OSV:GHSA-Q2XC-RRXJ-58X9...

ara-cli (>=0.1.14.13, <=0.1.14.14), auto-browse (>=0.0.2, <=0.0.5) +32 more potentially affected by CVE-2026-107295 via pydantic-ai (>=1.34.0, <=1.107.2)

pydantic-ai PYPI version =1.34.0, =0.1.14.13, =0.0.2, =1.34.0, =1.0.0, =1.0.0, =0.1.102, =26.0.0, =0.2.0, =0.1.0, =0.1.71, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2026-107295 Source advisory: SNYK:PYTHON-PYDANTICAI-20574181...

agent-runtimes (0.0.9), agent-utilities (>=0.41.0, <=0.51.0) +62 more potentially affected by CVE-2026-107295 via pydantic-ai-slim (>=1.34.0, <=1.107.2)

pydantic-ai-slim PYPI version =1.34.0, =0.41.0, =0.1.14.13, =0.0.2, =1.34.0, =0.0.400, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =20260622135108.0.0.dev0 and more Source cves: CVE-2026-107295 Source advisory: SNYK:PYTHON-PYDANTICAISLIM-20574180...

agent-runtimes (0.0.9), agent-utilities (>=0.41.0, <=0.51.0) +62 more potentially affected by CVE-2026-107295 via pydantic-ai-slim (>=1.34.0, <=1.107.2)

pydantic-ai-slim PYPI version =1.34.0, =0.41.0, =0.1.14.13, =0.0.2, =1.34.0, =0.0.400, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =20260622135108.0.0.dev0 and more Source cves: CVE-2026-107295 Source advisory: GHSA-H4XC-3QFQ-JF93...

ara-cli (>=0.1.14.13, <=0.1.14.14), auto-browse (>=0.0.2, <=0.0.5) +32 more potentially affected by CVE-2026-107295 via pydantic-ai (>=1.34.0, <=1.107.2)

pydantic-ai PYPI version =1.34.0, =0.1.14.13, =0.0.2, =1.34.0, =1.0.0, =1.0.0, =0.1.102, =26.0.0, =0.2.0, =0.1.0, =0.1.71, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2026-107295 Source advisory: GHSA-H4XC-3QFQ-JF93...

ara-cli (>=0.1.14.13, <=0.1.14.14), auto-browse (>=0.0.2, <=0.0.5) +56 more potentially affected by CVE-2026-107293 via pydantic-ai (>=0.3.4, <=1.107.2)

pydantic-ai PYPI version =0.3.4, =0.1.14.13, =0.0.2, =0.3.4, =0.0.174, =1.0.0, =0.9.0, =20250930132735.0.0.dev0, =0.1.102, =2.2.0, =0.6.3, =26.0.0, =26.1.1 and more Source cves: CVE-2026-107293 Source advisory: OSV:GHSA-3GH4-CGHQ-F8V4...