Malicious code in eniram-web-common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0fed7ec2d24f837bd31fd9768a9727452b9bf8ed355a7073f055fb4fba075c8 The package eniram-web-common-ui was found to contain malicious code. Source: ghsa-malware...

Malicious code in lusha-micro-app-messages (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2763ac2e60a783720a4825cd416a2c3e991ab820c9a11c72d809c5162eb822 The package lusha-micro-app-messages was found to contain malicious code. Source: ghsa-malware...

MAL-2026-264 Malicious code in @ux-foundry/palette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd18fdf82036fc2f39aba4198fb081eb4cb5683f9b9308bdb2a0f8539c54275 The package @ux-foundry/palette was found to contain malicious code. Source: ghsa-malware...

MAL-2026-319 Malicious code in vue_frontend_rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b3b39f0c20a8dd65bccdba671ecc5761e03146f454226847e982c424b8c25b The package vuefrontendrpc was found to contain malicious code. Source: ghsa-malware 30e31020ae5911a45b568d33238a4785bb2149dc1a8b474ac220aacb60546551...

MAL-2026-301 Malicious code in react-sitecore-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcb38af52d8a28ad89a31c0415f1673eb2ca18ec76121703ded6334a6b7e6d2 The package react-sitecore-library was found to contain malicious code. Source: ghsa-malware...

Malicious code in omnicore-ds2-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3582de0d77fa95932500d8933267b336557148b45ed5f23d090e2982962d9e The package omnicore-ds2-sdk was found to contain malicious code. Source: ghsa-malware 7990efbda2464df9633bde060381ff6c9ec75fa286fafb46cc27b4a16c6a98...

MAL-2026-302 Malicious code in s3-cache-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a516ba427a772d00c202a782f0c11f2217ddb8360626591dbbd72b68cc5a1b The package s3-cache-handler was found to contain malicious code...

MCPJam Inspector security vulnerabilities

MCPJam Inspector is an open-source debugging and quality analysis tool for the Model Context Protocol developed by MCPJam. Versions of MCPJam Inspector 1.4.2 and earlier contain security vulnerabilities. These vulnerabilities stem from specially crafted HTTP requests that can trigger the...

PT-2026-3321

Name of the Vulnerable Software and Affected Versions MCPJam inspector versions prior to 1.4.3 Description MCPJam inspector is a local-first development platform for MCP servers. The software is susceptible to remote code execution RCE because it binds to 0.0.0.0 by default instead of 127.0.0.1,...

Astra Linux – Vulnerability in WebKit2GTK

A flaw was discovered in WebKitGTK and WPE WebKit. This vulnerability allows for an out-of-bounds read and integer underflow, resulting in a UIProcess crash DoS through a crafted payload sent to the GLib remote inspector server...

[SECURITY] Fedora 43 Update: seamonkey-2.53.23-1.fc43

SeaMonkey is an all-in-one Internet application suite previously made popular by Netscape and Mozilla. It includes an Internet browser, advanced e-mail, newsgroup and feed client, a calendar, IRC client, HTML editor and a tool to inspect the DOM for web pages. It is derived from the application...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds read and an integer underflow bsc1254208...

SUSE-SU-2026:0021-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: - CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds read and an integer underflow bsc1254208....

Important: webkitgtk4

Issue Overview: A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash DoS via a crafted payload to the GLib remote inspector server. CVE-2025-13502 A flaw was found in WebKitGTK. This vulnerability allows...

Malicious code in identity-emitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e21ae9a5babde61e78ed9c713ec2e845a44ac55b19fb0d9cd48561159bb16a The package identity-emitter was found to contain malicious code...

Malicious code in initializers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa9db2df654753e6f6ebb5f77fd9607441b642e1da3306fbf8a1909fb41c179 The package initializers was found to contain malicious code. Source: ghsa-malware e0374b8e7835a603949d751a91405b851c622bd8536d96cf80a9b092fca15c35 A...

Malicious code in cc-double-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70cef7c9872833a60083bf6c209e3c0820db61d4350689db8b2480b58026874 The package cc-double-1 was found to contain malicious code...

Malicious code in kid-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc35802113ea5c7ac4e3d956e72af4ce3fbc5a9b3b8fc4c9d610d158d65250a The package kid-api was found to contain malicious code...

Malicious code in fix-cc-raiesy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17aa6cbdc4986ee5b3aa8c4ea5e5a4dc3ddfc9f7d266bdde5f9d81445551cb73 The package fix-cc-raiesy was found to contain malicious code. Source: ghsa-malware 8e5d10de64ca997908f8b7ba463f0bc41b2553f4d883ab13b6e9f7a4fa5d387e...

Malicious code in tickncook-robot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca37d83d19175da5b3240e35b77605369a59fac393b51117458e1d852e2c86f5 The package tickncook-robot was found to contain malicious code. Source: ghsa-malware 69891529072c56796517d40db82d60db1d56f7a70c03567b4b9d7341d9125f9...