CLSA-2026-1780447820 TuxCare security update for ember-cli (1 CVE)

TuxCare rebuilt ember-cli to address 1 CVE. Fixed in 1.13.11-tuxcare.1...

PT-2026-74917

TuxCare rebuilt ember-cli to address 1 CVE. Fixed in 1.13.11-tuxcare.1...

Malicious code in ember-cli-deploy-secrets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e75fdf3524b33e98181630b607b31f8d9f45b24cbb04270f207e335761cbe88d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11289 Malicious code in ember-cli-deploy-derploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92ef0bde2aabf74dbd75073a6cb7ce71165ba8fb32dec2e49f707337becea0eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview ember-cli-deploy-derploy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2026-11290 Malicious code in ember-cli-deploy-secrets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e75fdf3524b33e98181630b607b31f8d9f45b24cbb04270f207e335761cbe88d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-cli-bable (npm)

The package ember-cli-bable was found to contain malicious code...

Malicious code in ember_cli_babe (npm)

The package emberclibabe was found to contain malicious code...

MAL-2025-19577 Malicious code in ember_cli_babe (npm)

The package emberclibabe was found to contain malicious code...

Malicious code in ember-cli-ui-element (npm)

The package ember-cli-ui-element was found to contain malicious code...

MAL-2025-19557 Malicious code in ember-cli-bable (npm)

The package ember-cli-bable was found to contain malicious code...

MAL-2025-19559 Malicious code in ember-cli-ui-element (npm)

The package ember-cli-ui-element was found to contain malicious code...

MAL-2025-19558 Malicious code in ember-cli-compton (npm)

The package ember-cli-compton was found to contain malicious code...

Malware in ember-cli-progress-ci

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-47 Malicious code in ember-cli-progress-ci (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54512754f5c019f13ce9e5c3554ccdc6180846834e3f02daa24abb228033fc95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-cli-progress-ci (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54512754f5c019f13ce9e5c3554ccdc6180846834e3f02daa24abb228033fc95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ember-cli-broccoli-compass (>=0.0.1, <=0.0.5), ember-cli-compass (>=0.0.4, <=0.0.5) +1 more potentially affected by CVE-2023-27848 via broccoli-compass (>=0.0.7, <=0.1.1)

broccoli-compass NPM version =0.0.7, =0.0.1, =0.0.4, =0.0.1, =0.0.13 Source cves: CVE-2023-27848 Source advisory: OSV:GHSA-WQ8F-XMQ3-5VQ9...

Malicious Package

Overview ember-cli-htmlbars-3 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

PT-2020-21522

Name of the Vulnerable Software and Affected Versions ember cli babe version 6.16.0 Description The issue concerns malicious code in the ember cli babe package, designed to exploit typographical errors when installing modules. Upon installation, it downloads and executes a file from a remote...

@love-open-source/ember-slider (>=0.0.2, <=1.1.10), broccoli-compass-compiler (>=0.0.1, <=0.0.6) +1 more potentially affected by CVE-2020-7635 via compass-compile (0.0.1)

compass-compile NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on compass-compile and may be impacted: - @love-open-source/ember-slider =0.0.2, =0.0.1, =0.1.0, =0.5.0 Source cves: CVE-2020-7635 Source advisory:...