35897 matches found
MAL-2026-11981 Malicious code in pob-test-typescript-package-in-monorepo (npm)
npm/pob-test-typescript-package-in-monorepo is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...
MAL-2026-11746 Malicious code in @ornikar/eslint-config-babel (npm)
npm/@ornikar/eslint-config-babel is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malicious code in @ornikar/eslint-config-babel (npm)
npm/@ornikar/eslint-config-babel is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malicious code in @ornikar/browserslist-config (npm)
npm/@ornikar/browserslist-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11743 Malicious code in @ornikar/browserslist-config (npm)
npm/@ornikar/browserslist-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11750 Malicious code in @ornikar/eslint-config-react (npm)
npm/@ornikar/eslint-config-react is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malicious code in @ornikar/eslint-config-react (npm)
npm/@ornikar/eslint-config-react is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11777 Malicious code in @ornikar/storybook-config (npm)
npm/@ornikar/storybook-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11744 Malicious code in @ornikar/commitlint-config (npm)
npm/@ornikar/commitlint-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11751 Malicious code in @ornikar/eslint-config-typescript (npm)
npm/@ornikar/eslint-config-typescript is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized a...
MAL-2026-11745 Malicious code in @ornikar/eslint-config (npm)
npm/@ornikar/eslint-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11752 Malicious code in @ornikar/eslint-config-typescript-nestjs (npm)
npm/@ornikar/eslint-config-typescript-nestjs is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...
Malicious code in @ornikar/eslint-config-typescript (npm)
npm/@ornikar/eslint-config-typescript is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized a...
ROOT-APP-NPM-GHSA-6X33-PW7P-HMPQ GHSA-6x33-pw7p-hmpq in http-proxy - Patched by Root
Root has patched GHSA-6x33-pw7p-hmpq in the http-proxy package for Root:npm. Multiple fixed versions available...
CLSA-2026-1781830595 TuxCare security update for gh-pages (1 CVE)
TuxCare rebuilt gh-pages to address 1 CVE. Fixed in 0.12.0-tuxcare.1...
GHSA-V3R7-H72X-CJCM vulnerabilities
Vulnerabilities for packages: npm, kibana, code-server, pulumi, renovate, langfuse-fips, commercial-gitlab-rails-ee-fips, actions-runner, vitess, commercial-gitlab-rails-ee, prism, saf, pelias-api, langfuse...
GHSA-MFX4-HV73-Q22V vulnerabilities
Vulnerabilities for packages: kserve-huggingfaceserver-cuda-13.3, airflow, py3.13-scanner-test-libraries-aiohttp, py3-vllm-cuda-12.4, apache-beam-python-3.11-sdk, datahub-ingestion-fips, airflow-core, dask-kubernetes-fips, apache-beam-python-3.13-sdk, awx, text-generation-inference, kserve,...
GHSA-RFR2-MQ9M-X2QX vulnerabilities
Vulnerabilities for packages: label-studio...
