PT-2026-60310

Name of the Vulnerable Software and Affected Versions Node Version Manager nvm versions 0.32.1 through 0.40.5 Description An issue exists where nvm ls-remote and other commands that refresh remote LTS aliases, such as nvm install --lts, parse the node.js mirror's index.tab and use the LTS codenam...

Malicious code in @antstackio/json-to-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8602af1c076497f0aec4cec65fb012f2646c78c8c97f0fa8b234d5ef638fa6d The package @antstackio/json-to-graphql was found to contain malicious code. Source: google-open-source-security...

Malicious code in @oku-ui/toggle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d0819bf4913c5aabf31547b239ee5407c6e581d71ef7d041451c7f162314c1 The package @oku-ui/toggle was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191178 Malicious code in @actbase/native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328d7b0db77bbbc8012f6aee1eec6c2c15d1fec187573be00958308bceaf3b13 The package @actbase/native was found to contain malicious code. Source: ghsa-malware eb78c3f4eb3df2581ae53c6b6c46aa1d14c7a6027fa4f248b1e2b15763763ed...

MAL-2025-191326 Malicious code in @trackstar/test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f23787bf3317a1d48ff30444e506ed95b1c3242ab8092521a697181c736e960 The package @trackstar/test-package was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191325 Malicious code in @trackstar/test-angular-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9717e0da8bd1dc4f77e474bb3c7d75d247373f4b1321c41f90dae817b54690ed The package @trackstar/test-angular-package was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191155 Malicious code in wenk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209b9df1ab21f1d5e193a2a9e68ece62122dc7979592c1f21599dd018aebfff7 The package wenk was found to contain malicious code. Source: ghsa-malware 440c248dbbb7a7c4fb5db4f70f71b5dd51ca4287f3d4e83c7caceeab7aee2dd8 Any...

MAL-2025-190820 Malicious code in @quick-start-soft/quick-git-clean-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577d17cd2429a5652e40b47820dcf0d2effeaf1de1762f1ee7c8b3c14eeb7cb3 The package @quick-start-soft/quick-git-clean-markdown was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190731 Malicious code in @ensdomains/ens-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173e84cfbbc1d7f66bf31e3f547ed242f523d13cbe076c7b1c70ad771cad5b53 The package @ensdomains/ens-validation was found to contain malicious code. Source: ghsa-malware...

CVE-2025-65083

GoSign Desktop through 2.4.1 disables TLS certificate validation when configured to use a proxy server. This can be problematic if the GoSign Desktop user selects an arbitrary proxy server without consideration of whether outbound HTTPS connections from the proxy server to Internet servers succee...

CVE-2025-65083

GoSign Desktop through 2.4.1 disables TLS certificate validation when configured to use a proxy server. This can be problematic if the GoSign Desktop user selects an arbitrary proxy server without consideration of whether outbound HTTPS connections from the proxy server to Internet servers succee...