Malicious code in 0x2ai-demo9x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e796c3398589b92ecd70f45bc41128101313dd07adeb0634199ac3fef59d19d On npm install, scripts/postinstall.cjs copies the package's payload/ tree into the installer's project root process.env.INITCWD without consent,...

MAL-2026-5602 Malicious code in 0x2ai-zoe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724bd98c39a8e4ff21b039fddeadfda7f0ef7e3c6be47e771d72efed77d02b1b On npm install, scripts/postinstall.cjs copies the entire payload/ tree into process.env.INITCWD the directory the developer ran npm from, depositing...

Malicious code in 0x2ai-zoe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724bd98c39a8e4ff21b039fddeadfda7f0ef7e3c6be47e771d72efed77d02b1b On npm install, scripts/postinstall.cjs copies the entire payload/ tree into process.env.INITCWD the directory the developer ran npm from, depositing...

Malicious code in coderzero (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd26d5ae306572deded5926f2a32dd34de72377da3363cafc4c4026b9c5a93d When a user runs the coderzero CLI, the bundled Python client client/noderzero.py starts a clipboard monitor that polls pyperclip.paste every 300ms a...

MAL-2026-5610 Malicious code in coderzero (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd26d5ae306572deded5926f2a32dd34de72377da3363cafc4c4026b9c5a93d When a user runs the coderzero CLI, the bundled Python client client/noderzero.py starts a clipboard monitor that polls pyperclip.paste every 300ms a...

Malicious code in @tonsdk/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a9a70e3d8b322df960cb96b195f74693eb4d2ea284680e4cfb41a33f1848f8 @tonsdk/core impersonates the legitimate @ton/core TON blockchain SDK. On npm install, scripts/postinstall.js executes automatically and performs two...

MAL-2026-5564 Malicious code in @tonsdk/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a9a70e3d8b322df960cb96b195f74693eb4d2ea284680e4cfb41a33f1848f8 @tonsdk/core impersonates the legitimate @ton/core TON blockchain SDK. On npm install, scripts/postinstall.js executes automatically and performs two...

MAL-2026-5568 Malicious code in forge-jsx2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce40276c3c58337b7db3272f89e0716b017b4d63bfa625b8757b9d1969ec9f9 The package masquerades as an 'Autodesk Forge' integration but ships no Forge API code. On npm install, scripts/postinstall-agent.mjs materializes a...

Malicious code in forge-jsx2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce40276c3c58337b7db3272f89e0716b017b4d63bfa625b8757b9d1969ec9f9 The package masquerades as an 'Autodesk Forge' integration but ships no Forge API code. On npm install, scripts/postinstall-agent.mjs materializes a...

CVE-2026-47241 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, logstash, ruby3.2-rails, ruby3.4-rails, ruby4.0-rails, kube-fluentd-operator, jruby, ruby3.3-rails...

GHSA-46Q3-7GV7-QMGG vulnerabilities

Vulnerabilities for packages: kube-logging-operator, logstash, ruby3.2-rails, ruby3.4-rails, ruby4.0-rails, kube-fluentd-operator, jruby, ruby3.3-rails...

GHSA-8P34-64R3-MWG8 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, logstash, ruby3.2-rails, ruby3.4-rails, ruby4.0-rails, kube-fluentd-operator, jruby, ruby3.3-rails...

CVE-2026-47240 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, logstash, ruby3.2-rails, ruby3.4-rails, ruby4.0-rails, kube-fluentd-operator, jruby, ruby3.3-rails...

GHSA-C4FP-CXRR-MJ66 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, logstash, ruby3.2-rails, ruby3.4-rails, ruby4.0-rails, kube-fluentd-operator, jruby, ruby3.3-rails...

CVE-2026-47242 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, logstash, ruby3.2-rails, ruby3.4-rails, ruby4.0-rails, kube-fluentd-operator, jruby, ruby3.3-rails...

CVE-2026-47240 vulnerabilities

Vulnerabilities for packages: jruby, logstash, ruby4.0-rails, kube-logging-operator, gitlab-rails-ce, kube-fluentd-operator, logstash-fips, gitlab-rails-ce-fips, ruby3.3-rails, ruby3.2-rails, ruby3.4-rails, truffleruby...

GHSA-46Q3-7GV7-QMGG vulnerabilities

Vulnerabilities for packages: jruby, logstash, ruby4.0-rails, kube-logging-operator, gitlab-rails-ce, kube-fluentd-operator, logstash-fips, gitlab-rails-ce-fips, ruby3.3-rails, ruby3.2-rails, ruby3.4-rails, truffleruby...

GHSA-8P34-64R3-MWG8 vulnerabilities

Vulnerabilities for packages: jruby, logstash, ruby4.0-rails, kube-logging-operator, gitlab-rails-ce, kube-fluentd-operator, logstash-fips, gitlab-rails-ce-fips, ruby3.3-rails, ruby3.2-rails, ruby3.4-rails, truffleruby...

CVE-2026-47242 vulnerabilities

Vulnerabilities for packages: jruby, logstash, ruby4.0-rails, kube-logging-operator, gitlab-rails-ce, kube-fluentd-operator, logstash-fips, gitlab-rails-ce-fips, ruby3.3-rails, ruby3.2-rails, ruby3.4-rails, truffleruby...

CVE-2026-47241 vulnerabilities

Vulnerabilities for packages: jruby, logstash, ruby4.0-rails, kube-logging-operator, gitlab-rails-ce, kube-fluentd-operator, logstash-fips, gitlab-rails-ce-fips, ruby3.3-rails, ruby3.2-rails, ruby3.4-rails, truffleruby...