pino-debugging (>=1.1.3, <=1.1.5) potentially affected by unknown CVE via loadutils (1.0.6)

loadutils NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on loadutils and may be impacted: - pino-debugging =1.1.3, =1.1.5 Source cves: unknown CVE Source advisory: OSV:MAL-2026-6580...

Malicious code in loadutils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f1f1f6292d782062f6fff1f7422d9f1dc0eb1572e4372d6c0d574ccea3ab3a Package loadutils is a typosquat of the widely-used webpack helper loader-utils. The shipped README documents the loader-utils API urlToRequest,...

Malicious code in pino-debugging (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f0ecc81a618444e701cf5302ced1fa1e92aadc8df2ae2821d2a94a30683d9d Package name 'pino-debugging' is a single-edit typosquat of the legitimate 'pino-debug'. The shipped index.js requires a dependency named 'loadutils'...

MAL-2026-6583 Malicious code in pino-debugging (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f0ecc81a618444e701cf5302ced1fa1e92aadc8df2ae2821d2a94a30683d9d Package name 'pino-debugging' is a single-edit typosquat of the legitimate 'pino-debug'. The shipped index.js requires a dependency named 'loadutils'...

loadutils (>=1.0.4, <=1.0.6), pino-debugging (>=1.1.3, <=1.1.5) potentially affected by unknown CVE via lessload (1.0.1)

lessload NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on lessload and may be impacted: - loadutils =1.0.4, =1.1.3, =1.1.5 Source cves: unknown CVE Source advisory: OSV:MAL-2026-6579...