MAL-2026-4403 Malicious code in @link-assistant/hive-mind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfeaad3a9eda8f440dabe165d4ff6ba593c9858b9752d9bded19b05b292072a The package fetches https://unpkg.com/use-m/use.js — an unpinned URL that resolves to the latest published version of the third-party use-m package —...

Malicious code in @link-assistant/hive-mind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfeaad3a9eda8f440dabe165d4ff6ba593c9858b9752d9bded19b05b292072a The package fetches https://unpkg.com/use-m/use.js — an unpinned URL that resolves to the latest published version of the third-party use-m package —...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: vault-benchmark, dagdotdev, newrelic-fluent-bit-output, php-fpmexporter, vault-k8s, kuberay-operator, confluent-common-docker, ctop, gostatsd, octo-sts, bank-vaults, nats, sftpgo-plugin-pubsub, cloud-provider-aws, blobfuse2, sftpgo-plugin-geoipfilter, vexctl, gitsign...