@5minds/processcube_engine (>=19.0.0-beta.11, <=20.0.0-renovate-fd1892-me5sbqz0), @angular-architects/native-federation (>=22.0.0, <=22.0.1) +55 more potentially affected by CVE-2026-102992 via piscina (>=5.0.0, <=5.3.1)

piscina NPM version =5.0.0, =19.0.0-beta.11, =22.0.0, =20.0.0-rc.0, =20.0.0-rc.0, =21.2.2-depup.0, =1.0.0, =5.0.0, =21.0.0-alpha.10, =22.0.0-alpha.1, =21.0.0-alpha.10, =22.0.0-alpha.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =0.1.0, =0.1.26, =0.1.36 and more Source cves:...

@angular-architects/build-angular (16.2.0-next.2), @angular-builders/custom-esbuild (>=17.1.0-beta.0, <=19.1.0) +170 more potentially affected by CVE-2026-102992 via piscina (>=4.0.0, <=4.9.3)

piscina NPM version =4.0.0, =17.1.0-beta.0, =16.0.0-beta.0, =18.2.6-RC-1, =16.0.0, =16.2.0-next.0, =18.0.0-next.3, =2.2.7-bb.6, =2.1.5, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.17-dev.40 and more Source cves: CVE-2026-102992 Source advisory: OSV:GHSA-67C8-PQHQ-4RMX...

@1zuku/jui (>=0.1.0, <=0.1.3), @37chengshan/ompweb (>=0.3.5, <=5.1.9) +176 more potentially affected by CVE-2026-103004 via next (>=16.3.0-preview.5, <=16.3.7)

next NPM version =16.3.0-preview.5, =0.1.0, =0.3.5, =0.8.9, =0.6.0, =0.8.12, =0.1.5, =0.8.28, =0.1.0, =0.9.3, =0.9.4 and more Source cves: CVE-2026-103004 Source advisory: MEND:CVE-2026-103004...

@fdm-monster/server (>=2.0.11, <=2.1.1), @objectif-lune/node-red-contrib-ftp (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2026-102990 via basic-ftp (>=6.0.1, <=6.2.0)

basic-ftp NPM version =6.0.1, =2.0.11, =1.1.0, =1.0.0, =2.0.3-beta, =2.1.4-1257-beta.1 Source cves: CVE-2026-102990 Source advisory: GHSA-C475-QRG2-PJ4R...

@fdm-monster/server (>=2.0.11, <=2.1.1), @objectif-lune/node-red-contrib-ftp (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2026-102990 via basic-ftp (>=6.0.1, <=6.2.0)

basic-ftp NPM version =6.0.1, =2.0.11, =1.1.0, =1.0.0, =2.0.3-beta, =2.1.4-1257-beta.1 Source cves: CVE-2026-102990 Source advisory: SNYK:JS-BASICFTP-20419408...

MAL-2026-17437 Malicious code in @bluewin/utils (npm)

@bluewin/utils is a dependency-confusion package: it describes itself as a "PoC package for dependency confusion testing" and claims the @bluewin scope, so a build that resolves that scope from the public registry runs its code instead of the intended private package. Its postinstall script runs...

Malicious code in @bluewin/utils (npm)

@bluewin/utils is a dependency-confusion package: it describes itself as a "PoC package for dependency confusion testing" and claims the @bluewin scope, so a build that resolves that scope from the public registry runs its code instead of the intended private package. Its postinstall script runs...

@africanies/angular-web-sdk (>=0.1.0, <=0.1.27), @angelmartz/template-drawer-navigation-ng (9.1.0) +19 more potentially affected by unknown CVE via @angular/router (>=22.0.0, <=22.2.0)

@angular/router NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =22.0.0-alpha.1, =22.0.0-alpha.1, =0.0.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =0.0.0, =0.0.59 and more Source cves: unknown CVE Source advisory: MEND:WS-2026-0112...

Linux Distros Unpatched Vulnerability : CVE-2026-32148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient Verification of Data Authenticity vulnerability in hexpm hex Hex.RemoteConverger module allows dependency integrity bypass via unverified lockfile...

pytoil (0.36.0), team13hackertype (>=1.0.1, <=1.0.4) potentially affected by CVE-2026-102930 via virtualenv (20.16.6)

virtualenv PYPI version 20.16.6 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pytoil 0.36.0 - team13hackertype =1.0.1, =1.0.4 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...

foxbms-fox-cli (1.12.0), ironoc-pytest-conor-heffron (>=2.3.4, <=2.5.1) +8 more potentially affected by CVE-2026-102930 via virtualenv (>=21.1.0, <=21.7.4)

virtualenv PYPI version =21.1.0, =2.3.4, =0.1.4, =0.1.0, =0.3.1, =0.0.3, =1.5.1, =1.1.0, =1.0.0, =2.0.0, =2.0.1 Source cves: CVE-2026-102930 Source advisory: GHSA-94P9-XGH2-XP45...

cateye (>=0.3.4, <=0.3.8), edx-completion (>=0.0.1, <=0.1.1) +4 more potentially affected by CVE-2026-102930 via virtualenv (15.1.0)

virtualenv PYPI version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cateye =0.3.4, =0.0.1, =0.5.7, =1.0.0rc1, =1.2.0, =1.7.1 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...

pickley (1.9.19), thaispoon (0.0.1) potentially affected by CVE-2026-102930 via virtualenv (16.7.7)

virtualenv PYPI version 16.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pickley 1.9.19 - thaispoon 0.0.1 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...

pickley (>=3.1.1, <=3.1.5), pytoil (0.28.0) potentially affected by CVE-2026-102930 via virtualenv (20.13.3)

virtualenv PYPI version 20.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pickley =3.1.1, =3.1.5 - pytoil 0.28.0 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...

alice-ci (>=0.0.2, <=0.0.9), pickley (3.1.6) +1 more potentially affected by CVE-2026-102930 via virtualenv (20.14.0)

virtualenv PYPI version 20.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - alice-ci =0.0.2, =0.0.9 - pickley 3.1.6 - pytoil 0.29.0 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...

ciscoconfparse (>=1.6.53, <=1.7.3), pytoil (0.37.0) potentially affected by CVE-2026-102930 via virtualenv (20.16.7)

virtualenv PYPI version 20.16.7 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ciscoconfparse =1.6.53, =1.7.3 - pytoil 0.37.0 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...

azure-devops-artifacts-helpers (>=1.0.8, <=1.0.9), hip-data-ml-utils (>=0.3.7, <=1.0.0) +2 more potentially affected by CVE-2026-102930 via virtualenv (20.4.2)

virtualenv PYPI version 20.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - azure-devops-artifacts-helpers =1.0.8, =0.3.7, =8.2.1, =0.9.2, =1.1.0 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...

b1ddi (0.0.2), delete-branches (>=1.0.0, <=1.1.3) +15 more potentially affected by CVE-2026-102930 via virtualenv (20.34.0)

virtualenv PYPI version 20.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - b1ddi 0.0.2 - delete-branches =1.0.0, =1.1.14, =1.0.0, =1.1.0, =1.17.0, =1.25.0 and more Source cves: CVE-2026-102930 Source advisory:...

ersilia (>=0.1.0, <=0.1.1), pytoil (0.34.0) +1 more potentially affected by CVE-2026-102930 via virtualenv (20.15.1)

virtualenv PYPI version 20.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ersilia =0.1.0, =0.0.4, =0.0.7 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...

hatch (1.9.7) potentially affected by CVE-2026-102930 via virtualenv (20.25.3)

virtualenv PYPI version 20.25.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - hatch 1.9.7 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...