MAL-2026-1180 Malicious code in webnoch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f045d0850d50727da82888da15d6620d9328a2369899f721d607f1f4c403a5 The package webnoch was found to contain malicious code. Source: ghsa-malware 2a2b9fe8fd000b219aa46666ba8162fd132a3a15a5e0431d3c87c48b8c674eef Any...

MAL-2026-1166 Malicious code in @global-dax-ad-platform/dax-hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4a8a64a2361c5b47bb7a9a178246f12b7a26f9895b760f74f013d3ebd9d702 The package @global-dax-ad-platform/dax-hooks was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1167 Malicious code in @global-dax-ad-platform/dax-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb4c0cce0e997a5ceaf51dd24ec685c500bbfe904265afdce79bb5b2f7e0033 The package @global-dax-ad-platform/dax-modules was found to contain malicious code. Source: ghsa-malware...

Malicious code in @global-dax-ad-platform/dax-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb4c0cce0e997a5ceaf51dd24ec685c500bbfe904265afdce79bb5b2f7e0033 The package @global-dax-ad-platform/dax-modules was found to contain malicious code. Source: ghsa-malware...

Malicious code in @global-dax-ad-platform/dax-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ad3965eea87837397d655bd3d3cdd0ccefdbc65747460981af49ea2296dd2e The package @global-dax-ad-platform/dax-utils was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1170 Malicious code in @global-dax-ad-platform/dax-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ad3965eea87837397d655bd3d3cdd0ccefdbc65747460981af49ea2296dd2e The package @global-dax-ad-platform/dax-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in graph-dynamic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc9e411d29d7d359cf81fe3140dc3cee9d1583e20ad8bbf32ca9fb9e6e09860 The package graph-dynamic was found to contain malicious code. Source: ghsa-malware 2662ddb0770767495266ae6388242dbeb6fd0dfde8015252228968e4d28e1ad1...

Malicious code in openclaw-droid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f44b4e03b9d39603b2f92afff328117f480b35edd9fa3b64b40d6175b3432906 The package openclaw-droid was found to contain malicious code. Source: ghsa-malware a9462b166b838e565ac3aeb11533c69cb1168a95efc54468c0ed81628d080281...

Malicious code in token-discord-encryptation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c8f046fd4903192eb3de371ca4df10734635758b721d7cf2827f9df6f84f0d The package token-discord-encryptation was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1157 Malicious code in token-discord-encryptation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c8f046fd4903192eb3de371ca4df10734635758b721d7cf2827f9df6f84f0d The package token-discord-encryptation was found to contain malicious code. Source: ghsa-malware...

Malicious code in yazxzpedia-libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a15db837581bcddfd86653905bef2911ba017a109d3275551bb040e60b61794 The package yazxzpedia-libsignal was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1147 Malicious code in danzxoffc74-libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a41216321e9b425e7d33eef60ae4d705b659dad737e18b8a84bee404d031e4 The package danzxoffc74-libsignal was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1160 Malicious code in xpack-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62edc6bb089c839e93cf7b71b8b46ca1f5d064272cac586b49cda41fc40b1c19 The package xpack-subscription was found to contain malicious code. Source: ghsa-malware...

Malicious code in xpack-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62edc6bb089c839e93cf7b71b8b46ca1f5d064272cac586b49cda41fc40b1c19 The package xpack-subscription was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1152 Malicious code in pool-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 307e708d931ed9e7fc3cadd2e2daf55f69a216e6048275ae16db575e4939c805 The package pool-check was found to contain malicious code. Source: ghsa-malware 2da2c8462239a3dee4b27482f6d094115705cafcf589553f6836bc871a921ae8 Any...

CVE-2021-35486

A Cross-Site Request Forgery CSRF vulnerability in Nokia IMPACT through 19.11.2.10-20210118042150283 allows a remote attacker to import and overwrite the entire application configuration. Specifically, in /ui/rest-proxy/entity/import, neither the X-CSRF-NONCE HTTP header nor the CSRF-NONCE cookie...

CVE-2021-35486

CVE-2021-35486 affects Nokia IMPACT up to version 19.11.2.10-20210118042150283. The issue is a CSRF vulnerability in the /ui/rest-proxy/entity/import endpoint where neither the X-CSRF-NONCE header nor the CSRF-NONCE cookie is validated, allowing a remote attacker to import and overwrite the entir...

MAL-2026-1128 Malicious code in colorize-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f4e60bdcd92f4f5690797fa091f0acb0a463de5c353ded0f6f5e7317a2f84eb The package colorize-console was found to contain malicious code. Source: ghsa-malware a0e5faaa04c5e7d06c634dc2be1f148aa27acb8842f1731dad902bdb3e33d1...

Malicious code in @nazi-team/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe057f6743744866cb43bc64a47f0b4e814f4de1d503ea59e8b3db6b3880ad00 The package @nazi-team/baileys was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1122 Malicious code in @sanzxcode/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f6946c2edfc02e3a350dd33240e415111649135472f9f5c1d4e22d74fa529d The package @sanzxcode/libsignal-node was found to contain malicious code. Source: ghsa-malware...