Malicious code in @link-assistant/hive-mind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfeaad3a9eda8f440dabe165d4ff6ba593c9858b9752d9bded19b05b292072a The package fetches https://unpkg.com/use-m/use.js — an unpinned URL that resolves to the latest published version of the third-party use-m package —...

MAL-2026-4403 Malicious code in @link-assistant/hive-mind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfeaad3a9eda8f440dabe165d4ff6ba593c9858b9752d9bded19b05b292072a The package fetches https://unpkg.com/use-m/use.js — an unpinned URL that resolves to the latest published version of the third-party use-m package —...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, linkerd2-proxy-init, shfmt, mongodb-kubernetes-operator, nats, grafana-operator, hivemind, git-lfs, cloud-provider-aws, confluent-common-docker, docker-credential-ecr-login, sftpgo-plugin-pubsub, dagdotdev, bank-vaults, vault-k8s, gitsign,...