CVE-2026-22793

5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe option parsing vulnerability in the ECharts Markdown plugin allows any user able to submit ECharts code blocks to execute arbitrary JavaScript code in the...

MAL-2026-439 Malicious code in tv-admin-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c0b8199883c9cf5ea055f98b5f90f8cfb349eceba1b6c4026ef3b94c96872b The package tv-admin-commons was found to contain malicious code. Source: ghsa-malware 0b766afca3bfb069abd800cf6cb59759fc8555cdeb01e8d8e0576d5adaf720...

Malicious code in wallet-adapter-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd2a29de3dd67bd591f660c8b964bc262ba1967f0338d11a9e015ee04448c87 The package wallet-adapter-react was found to contain malicious code. Source: ghsa-malware...

Malicious code in internallib_v962 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9664f22a915362fceed28ec2e15ea4bfbc16dbdd91cb358cba05ef247fec36a5 The package internallibv962 was found to contain malicious code. Source: ghsa-malware 1e08ba6555343cafd51a03a186572eaf33065999ee721770a8d507645826dfd...

MAL-2026-396 Malicious code in private-internal-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368f6bede2407a1000e1a32b729d86d4e32e054965cde08ce07b732266c11186 The package private-internal-sdk was found to contain malicious code. Source: ghsa-malware...

MAL-2026-372 Malicious code in webmd-cookie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cea3e633de27fc446b20af035d103f0637ac73c9c5be185697d6c00e2329656 The package webmd-cookie was found to contain malicious code. Source: ghsa-malware 7c4d61d057a9a7c2e3ba6c1c54a58091ac030eff25b877dc80a22e0a804db962 A...

MAL-2026-361 Malicious code in gu-global-ec-uikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8b504bec83c372b24f21eb2b83e6a5ec1ceceef82ba4b57dc401e1ab44f9a4 The package gu-global-ec-uikit was found to contain malicious code. Source: ghsa-malware...

Malicious code in @daffadeveloper/signal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0087b0a9b601b66eed90dbf41396601a483159b3e74933ad6ed63e6a06e3d1 The package @daffadeveloper/signal-node was found to contain malicious code. Source: ghsa-malware...

PT-2026-3100

Entrust Instant Financial Issuance IFI On Premise software formerly referred to as CardWizard versions 5.x, prior to 6.10.5, and prior to 6.11.1 contain an insecure .NET Remoting exposure in the SmartCardController service DCG.SmartCardControllerService.exe. The service registers a TCP remoting...

Malicious code in simple-string-utils3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d9f9db863d718f528caa234dfa722b2631eb76195f504f47670898aeb0634a The package simple-string-utils3 was found to contain malicious code. Source: ghsa-malware...

MAL-2026-223 Malicious code in immer-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc0710eb5a0ad9d9eb01cbd2d6f7c1b9cc39b07636d82a05f2cafdf953756bd The package immer-js was found to contain malicious code. Source: ghsa-malware 920c7d161c9e90ea35c168d53dd01e0920704e5f35e76d330fac6fb3c0a2cb87 Any...

MAL-2026-210 Malicious code in @workleap-ai/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2800f2cfba8ac6e7a16ef977484e4da4d360c859848daedb5220c7d3595653e1 The package @workleap-ai/shared was found to contain malicious code. Source: ghsa-malware...

MAL-2026-174 Malicious code in dotenv-intended (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 321eaa257985bd47bbf31b2f7ccdaef2df5b424b7b257400a48140ef6029e670 The package dotenv-intended was found to contain malicious code. Source: ghsa-malware df2195d5589f3e44d82053db7cd9ae186dfd168b35c9db8f97baa29f0c63612...

MAL-2026-175 Malicious code in jwtdapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5222fd8fda1f00da9cfbd3e5bd457aaa90b6ea456aeb1ae2b9a5448dedc46b62 The package jwtdapp was found to contain malicious code. Source: ghsa-malware 916f8af27ab4818456f9abe642d6c4bcd8d3126e510e5a46e516a0fd45785d7d Any...

Malicious code in svelte-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822b182580c298051b9c1f8bb1e807bdb6c780fce64845002feebe37eddd0fad The package svelte-monorepo was found to contain malicious code. Source: ghsa-malware 1f5c5e96c4223fbe3046df01f3cda3aa9b821888050b45d82e92688609a7284...

MAL-2026-116 Malicious code in jh5o (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bec5d7cca5e58324cc7dea4623e12ad7bfad0a9ac6812a49373017a13c195a5b The package jh5o was found to contain malicious code. Source: ghsa-malware 01eaba01805549a7aa5e246fd04674dd562885c5fa3e0d4a6d30e1595e3fe945 Any...

MAL-2026-89 Malicious code in importmap-polyfil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d874c3ab0f1a1f131dca5c54020df385d3d3a2d8a58490de33ab3ebe3cf797 The package importmap-polyfil was found to contain malicious code. Source: ghsa-malware...

PT-2026-26014

Name of the Vulnerable Software and Affected Versions Citrix XenServer version 8.4 Description The Intel EPT paging code includes an optimization that defers flushing of cached EPT state until the p2m lock is released. However, the freeing of paging structures is not deferred, potentially leading...

MAL-2025-193002 Malicious code in @vietmoney/react-native-vnpay-merchant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db7aa9187bf0ea16a7e5209406b93cd1b253b087a17bac46ad5cf79b8fa317f3 The package @vietmoney/react-native-vnpay-merchant was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192972 Malicious code in react-devtools-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd222e067bee8f9d675a2d56e5e8eb63a00a76038df2d777aae7f5659bf3b0c6 The package react-devtools-shared was found to contain malicious code. Source: ghsa-malware...