MAL-2026-11430 Malicious code in list-issue-predecessor-dependencies-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f74d699bfc5fcf83c6f2864f93ecd41d3d9f8613f45f6bfb3b6dd5eeb7a880e The OpenSSF Package Analysis project identified 'list-issue-predecessor-dependencies-block' @ 99.0.0 npm as malicious. It is considered maliciou...

MAL-2026-11427 Malicious code in pp-react-worldready (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a0cb104ba7e29ae2e20cb4d191f5a1cb0a74de3a26cc06e9e6369d5bbee94e5 The OpenSSF Package Analysis project identified 'pp-react-worldready' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2026-11422 Malicious code in asdk-plugin-alphagen (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d3479f5a67e780468835828895609215d82aa5a273dfc152e4bae5a12f21a245 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-11196 Malicious code in @wbnr/design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dbd908eecacbb587e9534c244be33296e6fa11092200cba8428351bb66afe844 The OpenSSF Package Analysis project identified '@wbnr/design' @ 99.3.0 npm as malicious. It is considered malicious because: - The package...

MAL-2026-11170 Malicious code in @finxsecdemo/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f6ca8fa85d211056af32639b18f95f13c362b2764d85c812e6741d6747abf94d The OpenSSF Package Analysis project identified '@finxsecdemo/utils' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

CVE-2026-22068

Apache Traffic Server is affected by a Regular Expression without Anchors vulnerability (CVE-2026-22068). Affected versions are 10.0.x through 10.1.3 and 9.0.x through 9.2.14. The issue is addressed in versions 9.2.15 and 10.1.4. Exploitation status is not provided in the documents. CVSS data is ...

MAL-2026-11118 Malicious code in array-sort-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6cade78851ee1586c3bbf22b8c1393e0c2f8e51ac6c8496aaaf50cda425807cc The OpenSSF Package Analysis project identified 'array-sort-helper' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2026-11107 Malicious code in num-format-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8a8aaefbf5f2df138b5dd99eeb8aa0247ffe7570759470e6ad7479fc0700345f The OpenSSF Package Analysis project identified 'num-format-helper' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in date-sanitize-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b6764b7711cfa03cf6b3a2f70e24b3256a61ac9319d45200ada236fe7c3ed2 The package is advertised as a date parsing/sanitization helper but its postinstall.js runs automatically on npm install and performs installer-side...

MAL-2026-11106 Malicious code in date-sanitize-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b6764b7711cfa03cf6b3a2f70e24b3256a61ac9319d45200ada236fe7c3ed2 The package is advertised as a date parsing/sanitization helper but its postinstall.js runs automatically on npm install and performs installer-side...

MAL-2026-11108 Malicious code in string-format-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 752f3e4fded6d0546e00af595793134c025fd4afd8ee6d8188e0146a608b1cfb The OpenSSF Package Analysis project identified 'string-format-kit' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in @heartlandone-private/fontawesome-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b5bd52805195c9e3575760b3eaf605a2b9cb0fcbdde2311b7075d2d8095c4900 The OpenSSF Package Analysis project identified '@heartlandone-private/fontawesome-pro' @ 6.3.3 npm as malicious. It is considered malicious...

MAL-2026-11093 Malicious code in @heartlandone-private/fontawesome-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b5bd52805195c9e3575760b3eaf605a2b9cb0fcbdde2311b7075d2d8095c4900 The OpenSSF Package Analysis project identified '@heartlandone-private/fontawesome-pro' @ 6.3.3 npm as malicious. It is considered malicious...

MAL-2026-11066 Malicious code in @ks-radar/radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 24bbd0f16f929682cd413abde1e40578db9fa5b2ad8cb7cdc9927c70f5f5f710 The OpenSSF Package Analysis project identified '@ks-radar/radar' @ 22.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2026-11065 Malicious code in swiper_angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 474db4780bfc49ff2146966bdd508c123baf4d39c636e27aaba1996a0016d8f6 The OpenSSF Package Analysis project identified 'swiperangular' @ 5.9999.0 npm as malicious. It is considered malicious because: - The package...

MAL-2026-11070 Malicious code in whs4_deu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 96d7709dc56eae4bfe07031da42425b4a94a169255cd7b3bde0f31f0516e0fb0 The OpenSSF Package Analysis project identified 'whs4deu' @ 1.0.1 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2026-11072 Malicious code in wsh4_edu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e68d4c62ae8440581c4400e1cdacb7877912eb23610e273432d18cea61574785 The OpenSSF Package Analysis project identified 'wsh4edu' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2026-11064 Malicious code in page-navigation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c65bfe970c4520a6ac5c7e51efa638985191d6e01ee4cf3db97d270cff115d37 The OpenSSF Package Analysis project identified 'page-navigation' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in identityscimapiserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c77102d108de4236b5ff8d121143aaa19efde51a10e4f63a6f79ad2dc982c34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11061 Malicious code in identityscimapiserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c77102d108de4236b5ff8d121143aaa19efde51a10e4f63a6f79ad2dc982c34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...