MAL-2026-10014 Malicious code in nodemon-sudo (npm)

The npm package nodemon-sudo is a typosquat of the popular nodemon package: its package.json description "Simple monitor script for use during development of a Node.js app.", main entry ./lib/nodemon, and forged author field Remy Sharp, the real maintainer of nodemon are copied from the legitimat...

Malicious code in tslint-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b464b1646f8e2d36ce68a86af599cc49d5381f08af70302ff01f42957234a1 The package presents itself as the pino logger README, index.d.ts, docs/, and lib/ files all reference pinojs/pino but is published under the unrelat...

MAL-2026-4348 Malicious code in api-rs-node (npm)

A campaign of npm packages sharing a common dropper clob.js that downloads and persistently installs a Windows executable from IPFS on postinstall. The dropper fetches the binary from IPFS CID bafybeif3zkapj364ofnrvbty7oj5h5ufpxlp4s62usk3ulxrru35e3gssa via multiple public gateways Pinata,...

Malicious code in api-rs-node (npm)

A campaign of npm packages sharing a common dropper clob.js that downloads and persistently installs a Windows executable from IPFS on postinstall. The dropper fetches the binary from IPFS CID bafybeif3zkapj364ofnrvbty7oj5h5ufpxlp4s62usk3ulxrru35e3gssa via multiple public gateways Pinata,...

MAL-2026-4350 Malicious code in clobprice.api (npm)

A campaign of npm packages sharing a common dropper clob.js that downloads and persistently installs a Windows executable from IPFS on postinstall. The dropper fetches the binary from IPFS CID bafybeif3zkapj364ofnrvbty7oj5h5ufpxlp4s62usk3ulxrru35e3gssa via multiple public gateways Pinata,...

Malicious code in clob.api (npm)

A campaign of npm packages sharing a common dropper clob.js that downloads and persistently installs a Windows executable from IPFS on postinstall. The dropper fetches the binary from IPFS CID bafybeif3zkapj364ofnrvbty7oj5h5ufpxlp4s62usk3ulxrru35e3gssa via multiple public gateways Pinata,...

MAL-2026-4349 Malicious code in clob.api (npm)

A campaign of npm packages sharing a common dropper clob.js that downloads and persistently installs a Windows executable from IPFS on postinstall. The dropper fetches the binary from IPFS CID bafybeif3zkapj364ofnrvbty7oj5h5ufpxlp4s62usk3ulxrru35e3gssa via multiple public gateways Pinata,...

WS-2019-0246

In ipfs-bitswap, versions before 0.24.1 are vulnerable to a denial of service- when putting unwanted blocks in the blockstore...

Brave Desktop 1.90.121 Security Fixes

Changed IPFS gateway usage from "ipfs.io" to "inbrowser.link" for IPFS domain resolution. - Fixed broken address bar layout for narrow window widths. - Updated body-sniffing to respect "Content-Disposition: attachment" in de-AMP as reported on HackerOne by newfunction. Upgraded Chromium to...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: dockerize, cert-manager, openbao, go-licenses, mailpit, caddy, envoy-ratelimit, frp, terraform-provider-azuread, buildah, external-dns, cloud-provider-aws, gitleaks, kubescape-operator, kapp, nri-f5, pgtimetable, nri-rabbitmq, nsc, redis-operator,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: dockerize, cert-manager, openbao, go-licenses, mailpit, caddy, envoy-ratelimit, frp, terraform-provider-azuread, buildah, external-dns, cloud-provider-aws, gitleaks, kubescape-operator, kapp, nri-f5, pgtimetable, nri-rabbitmq, nsc, redis-operator,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: dockerize, cert-manager, openbao, go-licenses, mailpit, caddy, envoy-ratelimit, frp, terraform-provider-azuread, buildah, external-dns, cloud-provider-aws, gitleaks, kubescape-operator, kapp, nri-f5, pgtimetable, nri-rabbitmq, nsc, redis-operator,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, paranoia, backup-restore-operator, cloudbeat-fips, zitadel, tigera-operator-fips, envconsul-fips, etcd-fips, kuma, flux-helm-controller, rke2-runtime-fips, crane-fips, knative-operator-fips, tofu-controller-fips, dex-fips, atlas-fips, pulumi,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, paranoia, backup-restore-operator, cloudbeat-fips, zitadel, tigera-operator-fips, envconsul-fips, etcd-fips, kuma, flux-helm-controller, rke2-runtime-fips, crane-fips, knative-operator-fips, tofu-controller-fips, dex-fips, atlas-fips, pulumi,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, argo-workflows-fips, chaos-mesh, croc, amass, paranoia, backup-restore-operator, cloudbeat-fips, step-fips, zitadel, kubernetes-csi-external-snapshotter, tigera-operator-fips, volume-modifier-for-k8s, kuberlr, local-path-provisioner,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: croc, amazon-cloudwatch-agent-fips, zitadel, step-fips, local-path-provisioner, envconsul-fips, flux-helm-controller, databricks-cli, bank-vaults-fips, contour-fips, dex-fips, db-operator-fips, nfpm, flux-image-automation-controller, k8sgpt-operator, kubeflow-fips,...

GHSA-378J-3JFJ-8R9F vulnerabilities

Vulnerabilities for packages: spegel, k3s, ipfs-cluster...

CVE-2026-35480 vulnerabilities

Vulnerabilities for packages: spegel, k3s, ipfs-cluster...

Malicious Package

Overview @solana-ipfs/sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @pumpfun-ipfs/sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...