CVE-2026-113403 ArmorX Global Technology｜ArmorX Spam - Command Injection

ArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticated remote attackers can inject crafted commands into a specific parameter, thereby uploading malicious code to the server...

CVE-2026-113403

ArmorX Spam , developed by ArmorX Global Technology , contains a Command Injection vulnerability (CWE-93). This flaw allows authenticated remote attackers to inject crafted commands via a specific parameter. Successful exploitation enables the attacker to upload malicious code to the server. No s...

MAL-2026-18091 Malicious code in @platform-services/hrm-mfe-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6340950b2d19371534634bc33af5c0b785b1fa105a5c1084c5689879c4b03da8 package.json declares a dependency whose key equals the package's own name, @platform-services/hrm-mfe-core, with its source set to the bare URL...

Malicious code in @platform-services/hrm-mfe-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6340950b2d19371534634bc33af5c0b785b1fa105a5c1084c5689879c4b03da8 package.json declares a dependency whose key equals the package's own name, @platform-services/hrm-mfe-core, with its source set to the bare URL...

Malicious code in tailwind-fabric (npm)

tailwind-fabric 3.0.1, 3.0.4 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by johnxia1997 on 2026-09-28. src/motion.js:5 requires the private scoped package...

Malicious code in sc-announcer (npm)

Source: ossf-package-analysis 38abcbba47f18b6d76a06a770258c620fc322472d0db0d38b67f04805b916d43 The OpenSSF Package Analysis project identified 'sc-announcer' @ 99.9.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in ccl-global-shopping (npm)

Source: ossf-package-analysis 31f39d40e2c7700b1c070cbd26ea533789dc444daaf58e77d191f7eb10036fc9 The OpenSSF Package Analysis project identified 'ccl-global-shopping' @ 99.9.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in sc-wizard (npm)

Source: ossf-package-analysis 54691cc130e614ee031186f7e646c3e6076efad6105a6e9cad68f62aa736516b The OpenSSF Package Analysis project identified 'sc-wizard' @ 99.9.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. --...

Malicious code in tailwindcss-motionanimate (npm)

tailwindcss-motionanimate 1.0.1 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by doublekk61 on 2026-09-28. src/motion.js:5 requires the private scoped package...

Malicious code in tailwindcss-animatemotion (npm)

tailwindcss-animatemotion 1.0.7 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by doublekk61 on 2026-09-28. src/motion.js:5 requires the private scoped package...

Malicious code in tailwindcss-keyframe-kit (npm)

tailwindcss-keyframe-kit 3.0.0, 3.0.1, 3.0.2 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by hackson306623 on 2026-09-28. src/generators/motion-base.js:5 require...

Malicious code in tailwindcss-effect-lab (npm)

tailwindcss-effect-lab 0.0.0-stage, 1.6.7 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by johnsmith0821 on 2026-10-09. src/motion.js:5 requires the private scope...

Malicious code in tailwind-keyframes (npm)

tailwind-keyframes 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by adriannamrr on 2026-09-28. src/motion.js:5 requires the private scoped package...

Malicious code in tailwindcss-animate-catalog (npm)

tailwindcss-animate-catalog 2.0.6, 2.0.7 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by hackson306623 on 2026-09-28. lib/styles/variables.js:5 requires the...

Malicious code in tailwindcss-visual-kit (npm)

tailwindcss-visual-kit 0.0.0-stage, 1.3.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by johnsmith0821 on 2026-10-09. src/motion.js:5 requires the private scope...

Malicious code in animate-twcss-pack (npm)

animate-twcss-pack 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by enterprise0908 on 2026-09-28. src/motion.js:5 requires the private scoped package...

Malicious code in tailwind-animationlab (npm)

tailwind-animationlab 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by adriannamrr on 2026-09-28. src/motion.js:5 requires the private scoped package...

Malicious code in tailwind-css-keyframes (npm)

tailwind-css-keyframes 1.0.7 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by kinsleybadu on 2026-09-28. src/motion.js:5 requires the private scoped package...

Malicious code in tailwind-kinetic (npm)

tailwind-kinetic 2.0.6, 2.0.8 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by keinsell-jh on 2026-09-28. src/motion.js:5 requires the private scoped package...

Malicious code in animatecss-tailwind-plugin (npm)

animatecss-tailwind-plugin 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by hannahgibbs on 2026-09-28. src/motion.js:5 requires the private scoped package...