MAL-2026-4403 Malicious code in @link-assistant/hive-mind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfeaad3a9eda8f440dabe165d4ff6ba593c9858b9752d9bded19b05b292072a The package fetches https://unpkg.com/use-m/use.js — an unpinned URL that resolves to the latest published version of the third-party use-m package —...

Malicious code in @link-assistant/hive-mind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfeaad3a9eda8f440dabe165d4ff6ba593c9858b9752d9bded19b05b292072a The package fetches https://unpkg.com/use-m/use.js — an unpinned URL that resolves to the latest published version of the third-party use-m package —...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: blobfuse2, dagdotdev, local-path-provisioner, sftpgo-plugin-geoipfilter, sftpgo-plugin-pubsub, k8sgpt-operator, newrelic-nri-statsd, nats, gitsign, hivemind, kuberay-operator, grafana-operator, confluent-common-docker, vault-benchmark, kube-vip-cloud-provider,...