GHSA-VMCC-HWVC-GQ3R vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-azure, linux-gcp, linux-vmware...

GHSA-VP8V-GJJ6-F34X vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-azure, linux-gcp, linux-vmware...

CVE-2026-31579 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-azure, linux-gcp, linux-vmware...

CVE-2026-31591 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-azure, linux-gcp, linux-vmware...

CVE-2026-31613 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-azure, linux-gcp, linux-vmware...

CVE-2026-43107 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-azure, linux-gcp, linux-vmware...

CVE-2026-43108 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-azure, linux-gcp, linux-vmware...

GHSA-9RPM-78H2-FVW5 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-azure, linux-gcp, linux-vmware...

GHSA-R529-G827-7GF5 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-azure, linux-gcp, linux-vmware...

GHSA-V6VR-F94R-R434 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-azure, linux-gcp, linux-vmware...

CVE-2026-31620 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-azure, linux-gcp, linux-vmware...

CVE-2026-43101 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-azure, linux-gcp, linux-vmware...

CVE-2026-43102 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-azure, linux-gcp, linux-vmware...

CVE-2026-43103 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-azure, linux-gcp, linux-vmware...

GHSA-6447-4W47-GH9G vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-azure, linux-gcp, linux-vmware...

CVE-2026-43500 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-aws, linux-qemu, linux-azure, linux-qemu-rc, linux-gcp, linux-vmware...

Malicious Package

Overview apple-infra-gcp-leak is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @mistralai/mistralai-gcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcfd7fec176cc54232767b454429a7b3e0106aebbb16f2e9bdacc57e8a20ff9 The package @mistralai/mistralai-gcp was found to contain malicious code. Source: ghsa-malware...

MAL-2026-3512 Malicious code in @mistralai/mistralai-gcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcfd7fec176cc54232767b454429a7b3e0106aebbb16f2e9bdacc57e8a20ff9 The package @mistralai/mistralai-gcp was found to contain malicious code. Source: ghsa-malware...

Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

Summary On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/ packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow...