CVE-2026-22068

Apache Traffic Server is affected by a Regular Expression without Anchors vulnerability (CVE-2026-22068). Affected versions are 10.0.x through 10.1.3 and 9.0.x through 9.2.14. The issue is addressed in versions 9.2.15 and 10.1.4. Exploitation status is not provided in the documents. CVSS data is ...

Malicious code in date-sanitize-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b6764b7711cfa03cf6b3a2f70e24b3256a61ac9319d45200ada236fe7c3ed2 The package is advertised as a date parsing/sanitization helper but its postinstall.js runs automatically on npm install and performs installer-side...

MAL-2026-11106 Malicious code in date-sanitize-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b6764b7711cfa03cf6b3a2f70e24b3256a61ac9319d45200ada236fe7c3ed2 The package is advertised as a date parsing/sanitization helper but its postinstall.js runs automatically on npm install and performs installer-side...

Malicious code in @heartlandone-private/fontawesome-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b5bd52805195c9e3575760b3eaf605a2b9cb0fcbdde2311b7075d2d8095c4900 The OpenSSF Package Analysis project identified '@heartlandone-private/fontawesome-pro' @ 6.3.3 npm as malicious. It is considered malicious...

Malicious code in identityscimapiserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c77102d108de4236b5ff8d121143aaa19efde51a10e4f63a6f79ad2dc982c34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11061 Malicious code in identityscimapiserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c77102d108de4236b5ff8d121143aaa19efde51a10e4f63a6f79ad2dc982c34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-member-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f87897415ac7cb1f40cf896ec879d2a71a642d3361935df0758944a34389b13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11063 Malicious code in xo-member-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f87897415ac7cb1f40cf896ec879d2a71a642d3361935df0758944a34389b13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in f0-form-manipulator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b44787fd6b711e395dc87ae7f5235d0e80d5591a925f9149319aa7d6ba3f0f72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11060 Malicious code in f0-form-manipulator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b44787fd6b711e395dc87ae7f5235d0e80d5591a925f9149319aa7d6ba3f0f72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11062 Malicious code in preferenceslifecycle-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8741695d3ce21420a88f903f03c16da4621561d07117127b656f91488c9b58f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in merchantprefsservice-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cb0650e6084dbdffdf3011ee427b9997afa2ff2778d43e5e7929945cd14f54a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11057 Malicious code in merchantprefsservice-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cb0650e6084dbdffdf3011ee427b9997afa2ff2778d43e5e7929945cd14f54a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gpaas-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04c01a5b087d1c4d6ae8700fd1fee92cdb45c5a77f59a62723b17b5aa43e7f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11056 Malicious code in gpaas-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04c01a5b087d1c4d6ae8700fd1fee92cdb45c5a77f59a62723b17b5aa43e7f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pp-react-ui5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f33e8ad4e8e4d1037b0532607e4ddc2a7b9738ce59388d7258dbcc285ac900d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11059 Malicious code in pp-react-ui5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f33e8ad4e8e4d1037b0532607e4ddc2a7b9738ce59388d7258dbcc285ac900d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11058 Malicious code in payoutsvettingserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32d630492188c1db46669f68ec67e108a452a185dceb46b7fd0cb3bc939e865b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11020 Malicious code in hardhat-gas-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bc0a3828194aac457c89426a616772e54d6aa3868e1b0980b3e31bbbb20808c9 The OpenSSF Package Analysis project identified 'hardhat-gas-tracker' @ 1.0.1 npm as malicious. It is considered malicious because: - The packag...

MAL-2026-10968 Malicious code in commonweb-rewards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 186ad60c2221871a68cd4513fc2d2295a0595156cdea7615a49de03572f2e8e8 The OpenSSF Package Analysis project identified 'commonweb-rewards' @ 99.9.1 npm as malicious. It is considered malicious because: - The package...