1286 matches found
MAL-2026-10415 Malicious code in frontend-regulations (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d88817d57907505adf7d303019c78adceb6da7bedf1e3416f2b9a1e80605ca1 [email protected] is a near-empty wrapper index.js exports an empty object whose package.json declares the dependency 'ltidisafe' with the...
Malicious code in notifications-broadcast (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1aba4582464347961d36f63f501a5aaf2c190322e7ab8d8e4231c076b817e2 [email protected] ships an empty index.js module.exports = ; with placeholder metadata empty description, empty author, version 99.9.1...
MAL-2026-10421 Malicious code in portway (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04dc52cd77658d168578535fb67d77ea76de79beadb77e14c96f023f4e51772 package.json declares the dependency 'ltidisafe' as a direct https tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.3.2.tgz...
Malicious code in portway (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04dc52cd77658d168578535fb67d77ea76de79beadb77e14c96f023f4e51772 package.json declares the dependency 'ltidisafe' as a direct https tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.3.2.tgz...
Malicious code in sso-users-detection (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc80441472ec24451f83aebdc186d5bc532ddadaac8888d3d30b72c17c94f993 [email protected] is a hollow package main exports , empty author/description, inflated 99.9.1 version whose sole effect on install is to pu...
MAL-2026-10198 Malicious code in polylabel-web-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce7df46acd8236fafbaa27dbccb92d1f286c17b023ea5ff555700e76c4a0188f [email protected] ships an empty index.js stub and declares its only runtime dependency as a direct tarball URL on a Google Cloud Storage...
PT-2026-57441
Name of the Vulnerable Software and Affected Versions Parse Server versions 9.0.0 through 9.10.0-alpha.1 Parse Server versions 8.x through 8.6.83 Description A stored cross-site scripting XSS issue exists when the software fails to recognize an uploaded file's extension via the mime package,...
GHSA-5QWX-4Q7J-HWM2 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-azure...
CVE-2026-53269 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-azure...
GHSA-5G46-HMW3-W78X vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-azure...
GHSA-7M9Q-85QJ-RC4G vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-azure...
GHSA-Q96W-JFJR-XWW5 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-azure...
GHSA-VQ3G-6QWH-5WJ2 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-azure...
CVE-2026-53258 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-azure...
GHSA-GJ4P-2QJV-WCHV vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-azure...
GHSA-HQ32-RPPJ-R4RV vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-azure...
CVE-2026-53250 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-azure...
CVE-2026-53261 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp, linux-azure...