Malicious Package

Overview @link-assistant/hive-mind is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @link-assistant/hive-mind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfeaad3a9eda8f440dabe165d4ff6ba593c9858b9752d9bded19b05b292072a The package fetches https://unpkg.com/use-m/use.js — an unpinned URL that resolves to the latest published version of the third-party use-m package —...

MAL-2026-4403 Malicious code in @link-assistant/hive-mind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfeaad3a9eda8f440dabe165d4ff6ba593c9858b9752d9bded19b05b292072a The package fetches https://unpkg.com/use-m/use.js — an unpinned URL that resolves to the latest published version of the third-party use-m package —...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: shfmt, k8sgpt-operator, pvc-autoresizer, nats, sftpgo-plugin-pubsub, kserve-rest-proxy, dagdotdev, kube-vip-cloud-provider, newrelic-nri-statsd, sftpgo-plugin-geoipfilter, terraform-provider-time, confluent-common-docker, git-lfs, checksec, vault-benchmark,...