Malicious Package

Overview @gocortexio/npmgremlinbox-ms-lpl is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious code in @gocortexio/npmgremlinbox-malware-install-execution (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8a5a537b1738692165e905b11697bdac7455cccde5bf8b788767642d26c33b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10818 Malicious code in @gocortexio/npmgremlinbox-epl-1-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52212112115a7a68e8599473664e623f46746dbdc2eea1ff36ccbbc2959c5ccd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.1), com.arcadedb:arcadedb-graphql (>=26.1.1, <=26.7.1) +11 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (>=26.1.1, <=26.7.1)

com.arcadedb:arcadedb-server MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.5.1 - com.arcadedb:arcadedb-tracing 26.7.1 - io.github.mdre:adbogm 0.9.0.6 Source cves: CVE-2026-67342 Source advisory: OSV:GHSA-X8MG-6R4P-87P...

com.arcadedb:arcadedb-console (25.7.1), com.arcadedb:arcadedb-graphql (25.7.1) +9 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.7.1)

com.arcadedb:arcadedb-engine MAVEN version 25.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.7.1 - com.arcadedb:arcadedb-graphql 25.7.1 -...

com.arcadedb:arcadedb-console (24.11.2), com.arcadedb:arcadedb-coverage (24.11.2) +9 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (24.11.2)

com.arcadedb:arcadedb-engine MAVEN version 24.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.11.2 - com.arcadedb:arcadedb-coverage 24.11.2 -...

com.arcadedb:arcadedb-console (>=26.1.1, <=26.5.1), com.arcadedb:arcadedb-gremlin (>=26.1.1, <=26.5.1) +2 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-integration (>=26.1.1, <=26.5.1)

com.arcadedb:arcadedb-integration MAVEN version =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.5.1 Source cves: CVE-2026-54077 Source advisory: SNYK:JAVA-COMARCADEDB-18021394...

com.arcadedb:arcadedb-console (25.4.1), com.arcadedb:arcadedb-coverage (25.4.1) +10 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.4.1)

com.arcadedb:arcadedb-engine MAVEN version 25.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.4.1 - com.arcadedb:arcadedb-coverage 25.4.1 -...

com.arcadedb:arcadedb-console (25.3.1), com.arcadedb:arcadedb-coverage (25.3.1) +10 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.3.1)

com.arcadedb:arcadedb-engine MAVEN version 25.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.3.1 - com.arcadedb:arcadedb-coverage 25.3.1 -...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.5.1), com.arcadedb:arcadedb-console (>=26.1.1, <=26.5.1) +17 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (>=26.1.1, <=26.5.1)

com.arcadedb:arcadedb-engine MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.5.1 and more Source cves: CVE-2026-54077 Source advisory: GHSA-8W86-M9H8-HVQG...

com.arcadedb:arcadedb-console (25.8.1), com.arcadedb:arcadedb-graphql (25.8.1) +9 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.8.1)

com.arcadedb:arcadedb-engine MAVEN version 25.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.8.1 - com.arcadedb:arcadedb-graphql 25.8.1 -...

com.arcadedb:arcadedb-console (25.9.1), com.arcadedb:arcadedb-graphql (25.9.1) +12 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.9.1)

com.arcadedb:arcadedb-engine MAVEN version 25.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.9.1 - com.arcadedb:arcadedb-graphql 25.9.1 -...

com.arcadedb:arcadedb-console (25.12.1), com.arcadedb:arcadedb-graphql (25.12.1) +13 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.12.1)

com.arcadedb:arcadedb-engine MAVEN version 25.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.12.1 - com.arcadedb:arcadedb-graphql 25.12.1 -...

com.arcadedb:arcadedb-console (25.2.1), com.arcadedb:arcadedb-coverage (25.2.1) +10 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.2.1)

com.arcadedb:arcadedb-engine MAVEN version 25.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.2.1 - com.arcadedb:arcadedb-coverage 25.2.1 -...

aiogremlin (>=3.2.4b1, <=3.2.5), goblin (2.0.0b1) +3 more potentially affected by CVE-2025-69230 via aiohttp (1.3.3)

aiohttp PYPI version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiogremlin =3.2.4b1, =0.39.0, =1.0.0b1, =1.0.0b2 - okami 0.1.4 Source cves: CVE-2025-69230 Source advisory: OSV:PYSEC-2026-1105...

aiogremlin (>=3.2.4b1, <=3.2.5), goblin (2.0.0b1) +3 more potentially affected by CVE-2025-69224 via aiohttp (1.3.3)

aiohttp PYPI version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiogremlin =3.2.4b1, =0.39.0, =1.0.0b1, =1.0.0b2 - okami 0.1.4 Source cves: CVE-2025-69224 Source advisory: OSV:PYSEC-2026-1099...

aiogremlin (>=3.2.4b1, <=3.2.5), goblin (2.0.0b1) +3 more potentially affected by CVE-2025-69226 via aiohttp (1.3.3)

aiohttp PYPI version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiogremlin =3.2.4b1, =0.39.0, =1.0.0b1, =1.0.0b2 - okami 0.1.4 Source cves: CVE-2025-69226 Source advisory: OSV:PYSEC-2026-1097...

aiogremlin (>=3.2.4b1, <=3.2.5), goblin (2.0.0b1) +3 more potentially affected by CVE-2025-69227 via aiohttp (1.3.3)

aiohttp PYPI version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiogremlin =3.2.4b1, =0.39.0, =1.0.0b1, =1.0.0b2 - okami 0.1.4 Source cves: CVE-2025-69227 Source advisory: OSV:PYSEC-2026-1107...

aiogremlin (>=3.2.4b1, <=3.2.5), goblin (2.0.0b1) +3 more potentially affected by CVE-2025-69225 via aiohttp (1.3.3)

aiohttp PYPI version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiogremlin =3.2.4b1, =0.39.0, =1.0.0b1, =1.0.0b2 - okami 0.1.4 Source cves: CVE-2025-69225 Source advisory: OSV:PYSEC-2026-1109...

aiogremlin (>=3.2.4b1, <=3.2.5), goblin (2.0.0b1) +3 more potentially affected by CVE-2025-69223 via aiohttp (1.3.3)

aiohttp PYPI version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiogremlin =3.2.4b1, =0.39.0, =1.0.0b1, =1.0.0b2 - okami 0.1.4 Source cves: CVE-2025-69223 Source advisory: OSV:PYSEC-2026-1101...