MAL-2026-15873 Malicious code in btree-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180c50a02e5bbe5a57f622112bba7f7b01becd6cf85f6d9d4b8301699f4334b7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15890 Malicious code in ordered-freq-counter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508695a38291fb41f6ca49b06070cf670e079fd43796e1812acabdd467ba9166 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15893 Malicious code in sliding-score-window (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e2a97d5dd3e10080ee69201bf757ea14ebda90b9da1be41392584152ad1f1d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in indexed-btree (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcf3d23eb09d4a5d5736b43c78f6b140e79d23c0ac3488e84f3f1633c1ae578 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15888 Malicious code in indexed-btree (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcf3d23eb09d4a5d5736b43c78f6b140e79d23c0ac3488e84f3f1633c1ae578 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

Malicious code in element-guci-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43ee355ab038085d87ed11e81acc53a50163f14b617d54b7e9b9c31e800900a Package is published as an element-ui utility library element-guci-util, description '元素-ui 常用工具函数集合' but its main entrypoint contains no utility...

Malicious code in guci-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eec13cc0ba860ec3d0fced651c1d65f4122d358a8afc9a8b806d9d712d96af2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in guci-wxrout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bb83d0fbcc9d1cd163b94168217fbe3cbe5a6bd365af14d47da094eeb7a1400 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fullcalendar-windos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 942f89203237b7bb1f918d607864784dc6337b97df3fb598dda116c2b04e2370 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in element-utils-guci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86753bfc758ba4e9c2c759b41e85f2720f38585f5eb0bf42966dfdb7fab6ea59 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15881 Malicious code in element-icon-guci (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b47763652442a29a047d076f48a01b00f72f56af9bc28014f3cd4735f16e9f3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15883 Malicious code in fullcalendar-windos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 942f89203237b7bb1f918d607864784dc6337b97df3fb598dda116c2b04e2370 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15882 Malicious code in element-utils-guci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86753bfc758ba4e9c2c759b41e85f2720f38585f5eb0bf42966dfdb7fab6ea59 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15886 Malicious code in guci-wxrout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bb83d0fbcc9d1cd163b94168217fbe3cbe5a6bd365af14d47da094eeb7a1400 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15880 Malicious code in element-guci-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43ee355ab038085d87ed11e81acc53a50163f14b617d54b7e9b9c31e800900a Package is published as an element-ui utility library element-guci-util, description '元素-ui 常用工具函数集合' but its main entrypoint contains no utility...

MAL-2026-15885 Malicious code in guci-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eec13cc0ba860ec3d0fced651c1d65f4122d358a8afc9a8b806d9d712d96af2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in guci-date (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c249413cd0bbe7f76321cbaeedac49d6ddbf63030ea67b514dd1a662e9fc8d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15884 Malicious code in guci-date (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c249413cd0bbe7f76321cbaeedac49d6ddbf63030ea67b514dd1a662e9fc8d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-cloud-internal-core-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 655e243795a73e8b8b7f7b1c9b4f5769d1d13deba1dc53679fe6153b8405a531 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...