MAL-2026-675 Malicious code in supun-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a334e071b736bf620c4a29e4ec2bbaaf59bc6c3d3ab7b44603e19e9a8d95d8e9 The package supun-baileys was found to contain malicious code. Source: ghsa-malware 43ec7bfea6bfa4e623dfafee2f6f8843915886935b0d44ad5d6de4b52f72cb41...

EUVD-2025-206715

FUXA v1.2.7 allows Remote Code Execution RCE via the project import functionality. The application does not properly sanitize or sandbox user-supplied scripts within imported project files. An attacker can upload a malicious project containing system commands, leading to full system compromise...

CVE-2025-69983

FUXA v1.2.7 allows Remote Code Execution RCE via the project import functionality. The application does not properly sanitize or sandbox user-supplied scripts within imported project files. An attacker can upload a malicious project containing system commands, leading to full system compromise...

CVE-2025-69983

FUXA v1.2.7 allows Remote Code Execution RCE via the project import functionality. The application does not properly sanitize or sandbox user-supplied scripts within imported project files. An attacker can upload a malicious project containing system commands, leading to full system compromise...

CVE-2022-50981

An unauthenticated remote attacker can gain full access on the affected devices as they are shipped without a password by default and setting one is not enforced...

Malicious code in chai-async-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe54f3f00b12c9b57fd672be7ddbe4a46342c24fe308c31f31c6156ae436d8b The package chai-async-tests was found to contain malicious code. Source: ghsa-malware 4303ac7ff339f51dfbc53ed8c70cd02a76123b62e0448bca935128fd313ab3...

MAL-2026-545 Malicious code in testxhjhka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa2b3af066bd5f02846fff50e2189f8c3a55cb62f71dd6835f4a999cd7dab42 The package testxhjhka was found to contain malicious code. Source: ghsa-malware 0552fa210ad2b24b0f9caf718edc7aed87d7cd7c610f380cf5348bd31b2fad70 Any...

Malicious code in n8n-nodes-gasdhgfuy-rejerw-ytjsadx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e080478bd45e69f6daa0a8af616a71d7c1461853f41a3820e574459d96a7294a The package n8n-nodes-gasdhgfuy-rejerw-ytjsadx was found to contain malicious code. Source: ghsa-malware...

MAL-2026-539 Malicious code in n8n-nodes-gg-udhasudsh-hgjkhg-official (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f177f9d8bad0a259983bc9f3e0880c59ee120b1e686e3f10b490ab0527beec3 The package n8n-nodes-gg-udhasudsh-hgjkhg-official was found to contain malicious code. Source: ghsa-malware...

PT-2026-4533

Name of the Vulnerable Software and Affected Versions Sourcecodester Modern Image Gallery App version 1.0 Description A Remote Code Execution RCE issue exists in the gallery/upload.php component of the application. The application does not properly validate uploaded file contents and preserves...

CVE-2026-23755

D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in the installer. When executed with elevated privileges via UAC, the installer attempts to load version.dll from its execution directory, allowing DLL preloading. An attacker can supply a malicious...

CVE-2026-23755

D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in the installer. When executed with elevated privileges via UAC, the installer attempts to load version.dll from its execution directory, allowing DLL preloading. An attacker can supply a malicious...

MAL-2026-433 Malicious code in wallet-adapter-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd2a29de3dd67bd591f660c8b964bc262ba1967f0338d11a9e015ee04448c87 The package wallet-adapter-react was found to contain malicious code. Source: ghsa-malware...

Malicious code in @joaoxxx/internallib-v325 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9c573db1b523cb0082a05f37710f4084f5ed28324fbe23186a7ebf9a0a082d The package @joaoxxx/internallib-v325 was found to contain malicious code. Source: ghsa-malware...

MAL-2026-391 Malicious code in internallib_v962 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9664f22a915362fceed28ec2e15ea4bfbc16dbdd91cb358cba05ef247fec36a5 The package internallibv962 was found to contain malicious code. Source: ghsa-malware 1e08ba6555343cafd51a03a186572eaf33065999ee721770a8d507645826dfd...

MAL-2026-379 Malicious code in @joaoxxx/internallib-v325 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9c573db1b523cb0082a05f37710f4084f5ed28324fbe23186a7ebf9a0a082d The package @joaoxxx/internallib-v325 was found to contain malicious code. Source: ghsa-malware...

PT-2026-3843

D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in the installer. When executed with elevated privileges via UAC, the installer attempts to load version.dll from its execution directory, allowing DLL preloading. An attacker can supply a malicious...

MAL-2026-339 Malicious code in internallib_v355 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dba9a4166fd959eea5357952f1ffba736b4e6c9176ddeff85e0aeb1592edef8 The package internallibv355 was found to contain malicious code. Source: ghsa-malware 41e49779a105339cef2addb161d2a79d3aa2e22201f862ba6c3ef2af1ab1ccd...

CVE-2026-22908

Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity and confidentiality...

MAL-2026-321 Malicious code in flip-prx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51518ff5a54220f9558ab04c5bad0ac14e14ee3aff6c92b54c1b727e1a90f4b7 The package flip-prx was found to contain malicious code. Source: ghsa-malware 7490a8c35552395560296cfd74b57dc93c222f1bc067d02a1c92d1ec180b7bfa Any...