MAL-2026-10014 Malicious code in nodemon-sudo (npm)

The npm package nodemon-sudo is a typosquat of the popular nodemon package: its package.json description "Simple monitor script for use during development of a Node.js app.", main entry ./lib/nodemon, and forged author field Remy Sharp, the real maintainer of nodemon are copied from the legitimat...

Malicious code in tslint-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b464b1646f8e2d36ce68a86af599cc49d5381f08af70302ff01f42957234a1 The package presents itself as the pino logger README, index.d.ts, docs/, and lib/ files all reference pinojs/pino but is published under the unrelat...

MAL-2026-4348 Malicious code in api-rs-node (npm)

A campaign of npm packages sharing a common dropper clob.js that downloads and persistently installs a Windows executable from IPFS on postinstall. The dropper fetches the binary from IPFS CID bafybeif3zkapj364ofnrvbty7oj5h5ufpxlp4s62usk3ulxrru35e3gssa via multiple public gateways Pinata,...

Malicious code in api-rs-node (npm)

A campaign of npm packages sharing a common dropper clob.js that downloads and persistently installs a Windows executable from IPFS on postinstall. The dropper fetches the binary from IPFS CID bafybeif3zkapj364ofnrvbty7oj5h5ufpxlp4s62usk3ulxrru35e3gssa via multiple public gateways Pinata,...

MAL-2026-4350 Malicious code in clobprice.api (npm)

A campaign of npm packages sharing a common dropper clob.js that downloads and persistently installs a Windows executable from IPFS on postinstall. The dropper fetches the binary from IPFS CID bafybeif3zkapj364ofnrvbty7oj5h5ufpxlp4s62usk3ulxrru35e3gssa via multiple public gateways Pinata,...

MAL-2026-4349 Malicious code in clob.api (npm)

A campaign of npm packages sharing a common dropper clob.js that downloads and persistently installs a Windows executable from IPFS on postinstall. The dropper fetches the binary from IPFS CID bafybeif3zkapj364ofnrvbty7oj5h5ufpxlp4s62usk3ulxrru35e3gssa via multiple public gateways Pinata,...

Malicious code in clob.api (npm)

A campaign of npm packages sharing a common dropper clob.js that downloads and persistently installs a Windows executable from IPFS on postinstall. The dropper fetches the binary from IPFS CID bafybeif3zkapj364ofnrvbty7oj5h5ufpxlp4s62usk3ulxrru35e3gssa via multiple public gateways Pinata,...

WS-2019-0246

In ipfs-bitswap, versions before 0.24.1 are vulnerable to a denial of service- when putting unwanted blocks in the blockstore...

Brave Desktop 1.90.121 Security Fixes

Changed IPFS gateway usage from "ipfs.io" to "inbrowser.link" for IPFS domain resolution. - Fixed broken address bar layout for narrow window widths. - Updated body-sniffing to respect "Content-Disposition: attachment" in de-AMP as reported on HackerOne by newfunction. Upgraded Chromium to...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: spicedb-operator, crossplane-provider-azure-authorization, newrelic-k8s-metadata-injection, docker-machine-driver-harvester, dataplaneapi, nats, amazon-cloudwatch-agent-operator, terraform-provider-tls, kyverno, jitsucom-bulker, redis-operator, kubernetes,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: spicedb-operator, crossplane-provider-azure-authorization, newrelic-k8s-metadata-injection, docker-machine-driver-harvester, dataplaneapi, nats, amazon-cloudwatch-agent-operator, terraform-provider-tls, kyverno, jitsucom-bulker, redis-operator, kubernetes,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: spicedb-operator, crossplane-provider-azure-authorization, newrelic-k8s-metadata-injection, docker-machine-driver-harvester, dataplaneapi, nats, amazon-cloudwatch-agent-operator, terraform-provider-tls, kyverno, jitsucom-bulker, redis-operator, kubernetes,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: kube-arangodb-fips, cloudflared-fips, pulumi-language-yaml, crossplane, gitlab-kas, dex, cloud-provider-aws-fips, commercial-grafana, kbld, karpenter, kubernetes-csi-node-driver-registrar-fips, backup-restore-operator-fips, licenseclassifier, gitlab-rails-ce-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: kube-arangodb-fips, cloudflared-fips, pulumi-language-yaml, crossplane, gitlab-kas, dex, cloud-provider-aws-fips, commercial-grafana, kbld, karpenter, kubernetes-csi-node-driver-registrar-fips, backup-restore-operator-fips, licenseclassifier, gitlab-rails-ce-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: migrate, whereabouts, kube-arangodb-fips, knative-net-istio, cloudflared-fips, pulumi-language-yaml, oauth2-proxy, blob-csi-fips, crossplane, gitlab-kas, dex, external-dns-fips, cloud-provider-aws-fips, commercial-grafana, dynamic-localpv-provisioner-fips, kbld,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: migrate, knative-net-istio, crossplane, gosu-fips, commercial-grafana, wave, flagger-fips, teleport-operator-fips, ucd, cluster-api, kustomize, terraform-provider-sendgrid-fips, sbom-scorecard, pguser, kubeflow, dkron, hey, emqx-exporter, knative-eventing-fips,...

GHSA-378J-3JFJ-8R9F vulnerabilities

Vulnerabilities for packages: ipfs-cluster, k3s, spegel...

CVE-2026-35480 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, k3s, spegel...

Malicious Package

Overview @solana-ipfs/sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @pumpfun-ipfs/sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...