Malicious code in sui-move-gql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d32aaadd6f2f9e7febdc74278d21a613be170411c50a382228f51e47447e53 On require of the package, lib/diagnostics.js reads /.sui/sui.keystore, files under /.sui/suiconfig/, /.aws/credentials, and /.aws/config from the...

Malicious code in sui-gql-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd108608caad4cab6ceb193a4711e40f7007114ddd01bcd5b8c3a958c1c70520 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14112 Malicious code in sui-gql-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd108608caad4cab6ceb193a4711e40f7007114ddd01bcd5b8c3a958c1c70520 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14095 Malicious code in sui-gql-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28a4b2d4cc150907b2806acdf37a62e73d08ded15b870b49dbcc4817535390e5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in sui-gql-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28a4b2d4cc150907b2806acdf37a62e73d08ded15b870b49dbcc4817535390e5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious Package

Overview sui-gql is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in sui-gql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86abb4ef26b5c61e261c09d96823d64e6bfac2de04c8da1c2be9b738a47a70da The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-13926 Malicious code in sui-gql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86abb4ef26b5c61e261c09d96823d64e6bfac2de04c8da1c2be9b738a47a70da The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious Package

Overview sui-gql-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-13768 Malicious code in sui-gql-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763079354e471aa241953530a79a946e060402895da52ca47628f1817c452d7e Analysis of the package did not surface install-time lifecycle scripts, credential access, network exfiltration, dropper behavior, silent-relay, or...

Malicious code in sui-gql-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763079354e471aa241953530a79a946e060402895da52ca47628f1817c452d7e Analysis of the package did not surface install-time lifecycle scripts, credential access, network exfiltration, dropper behavior, silent-relay, or...

PT-2026-57591

Finding Location: core/src/client/graphql.ts:66-80 The gql template tag function warned about interpolated values containing GraphQL metacharacters : but still concatenated them into the query string, enabling potential GraphQL injection. Status Fixed in v0.2.136 — The gql function now throws an...

Duplicate Advisory: utcp-gql SSRF: CVE-2026-44661 fix not applied to the GraphQL and WebSocket plugins

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-ppx3-28rw-8fpf. This link is maintained to preserve external references. Original Description A vulnerability was detected in universal-tool-calling-protocol python-utcp 1.1.0. This affects an unknown function o...

GHSA-VG9F-Q4XH-62R4 Duplicate Advisory: utcp-gql SSRF: CVE-2026-44661 fix not applied to the GraphQL and WebSocket plugins

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-ppx3-28rw-8fpf. This link is maintained to preserve external references. Original Description A vulnerability was detected in universal-tool-calling-protocol python-utcp 1.1.0. This affects an unknown function o...

CVE-2026-12210

CVE-2026-12210 affects the universal-tool-calling-protocol project, specifically the python-utcp 1.1.0 release, with a vulnerability in the utcp-gql/utcp-websocket component that enables server-side request forgery. The description notes a remote, public exploit and a lack of vendor response. The...

CVE-2026-12210 universal-tool-calling-protocol python-utcp utcp-gql/utcp-websocket server-side request forgery

A vulnerability was detected in universal-tool-calling-protocol python-utcp 1.1.0. This affects an unknown function of the component utcp-gql/utcp-websocket. Performing a manipulation results in server-side request forgery. The attack can be initiated remotely. The exploit is now public and may b...

PT-2026-82005

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-ppx3-28rw-8fpf. This link is maintained to preserve external references. Original Description A vulnerability was detected in universal-tool-calling-protocol python-utcp 1.1.0. This affects an unknown function o...

CVE-2026-12210: Server-Side Request Forgery (SSRF)

A vulnerability was detected in universal-tool-calling-protocol python-utcp 1.1.0. This affects an unknown function of the component utcp-gql/utcp-websocket. Performing a manipulation results in server-side request forgery. The attack can be initiated remotely. The exploit is now public and may b...

Malicious code in oradm-to-gql (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0ac4253913c37f56a9ee729dd49820eda47882515ce23f981c61b39f249ecf4 Any computer that has this package installed or running should be considered fully compromised. All...

Malware in oradm-to-gql

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...