Malicious code in @marketfront/header (npm)

The @marketfront/header package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

Malicious code in @marketfront/errorcounter (npm)

The @marketfront/errorcounter package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

Malicious code in @marketfront/madvpopup (npm)

The @marketfront/madvpopup package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

MAL-2026-6765 Malicious code in @marketfront/bannerpopup (npm)

The @marketfront/bannerpopup package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

Malicious code in @marketfront/digitalherobannercarousel (npm)

The @marketfront/digitalherobannercarousel package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0...

MAL-2026-6775 Malicious code in @marketfront/digitalherobannercarousel (npm)

The @marketfront/digitalherobannercarousel package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0...

MAL-2026-6783 Malicious code in @marketfront/infopopup (npm)

The @marketfront/infopopup package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

MAL-2026-6768 Malicious code in @marketfront/blenderdevtool (npm)

The @marketfront/blenderdevtool package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

MAL-2026-6780 Malicious code in @marketfront/footer (npm)

The @marketfront/footer package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

MAL-2026-6771 Malicious code in @marketfront/commonecommerce (npm)

The @marketfront/commonecommerce package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

MAL-2026-6767 Malicious code in @marketfront/basemarkettemplate (npm)

The @marketfront/basemarkettemplate package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and...

Malicious code in @marketfront/captchaservice (npm)

The @marketfront/captchaservice package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

Malicious code in @marketfront/livestreampreviewpopup (npm)

The @marketfront/livestreampreviewpopup package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0...

MAL-2026-6772 Malicious code in @marketfront/customdealsfeed (npm)

The @marketfront/customdealsfeed package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

MAL-2026-6787 Malicious code in @marketfront/navbar (npm)

The @marketfront/navbar package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

CVE-2026-14109

creationtimestamp| type| source ---|---|--- 2026-07-01 21:47:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmikvy2q622 2026-07-01 21:47:11+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmil5kn6p23 2026-07-02 01:46:01+00:00| seen|...

CVE-2026-14041

creationtimestamp| type| source ---|---|--- 2026-07-01 21:23:06+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmha35g752k 2026-07-01 21:23:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmha5thxd2l 2026-07-01 23:53:16+00:00| seen|...

CVE-2026-13809

creationtimestamp| type| source ---|---|--- 2026-07-01 19:47:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmbuskdo62q 2026-07-01 19:47:22+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmbuvu6h62v 2026-07-02 07:19:23+00:00| seen|...

CVE-2026-2387

creationtimestamp| type| source ---|---|--- 2026-07-01 12:39:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpljxtws6y26 2026-07-01 12:39:35+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpljxyict32a 2026-07-04 10:15:07+00:00| seen|...

CVE-2026-13733

creationtimestamp| type| source ---|---|--- 2026-07-01 09:16:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6mcgcha2o 2026-07-01 09:16:13+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpl6md3emm2g 2026-07-01 11:16:06+00:00| seen|...