1106 matches found
Malicious code in @lint-md/parser (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
MAL-2026-3964 Malicious code in @antv/g-web-components (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
MAL-2026-3963 Malicious code in @antv/g-web-animations-api (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
MAL-2026-4096 Malicious code in @antv/word-scale-chart (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
MAL-2026-4064 Malicious code in @antv/li-sam-assets (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
MAL-2026-3885 Malicious code in @antv/f-react (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
MAL-2026-3906 Malicious code in @antv/f6-ui (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
CVE-2026-43105 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-azure, linux-vmware...
GHSA-3W37-M4PG-Q585 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-azure, linux-vmware...
GHSA-8P2W-G92W-F4X3 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-azure, linux-vmware, linux-qemu-melange, linux-qemu-rc...
GHSA-FVVW-8GW5-VW5F vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-azure, linux-vmware...
GHSA-P3HP-QCHJ-85WC vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-azure, linux-vmware...
GHSA-QX6Q-MQG9-4PX7 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-azure, linux-vmware...
GHSA-VGGP-XWF8-34Q8 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-azure, linux-vmware...
GHSA-VMCC-HWVC-GQ3R vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-azure, linux-vmware...
GHSA-VP8V-GJJ6-F34X vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-azure, linux-vmware...
CVE-2026-43104 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-azure, linux-vmware...
CVE-2026-31579 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-azure, linux-vmware...