Malicious Package

Overview bt2-api-gateway-node-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious Package

Overview arif-sambel55-sluey is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview arif-poke82 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview env-validator-tool is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview company-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview telemetry-helper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview syswatch is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview bella-gulai98-breki is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-32773

There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a malicious Spark job to generate arbitrary unescaped frontend code which could lead to a minimal privilege escalation in browser. Users are encouraged to upgrade to Spark 3.5.8 or later. This CVE is marked as...

EUVD-2026-69899

There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a malicious Spark job to generate arbitrary unescaped frontend code which could lead to a minimal privilege escalation in browser. Users are encouraged to upgrade to Spark 3.5.8 or later. This CVE is marked as...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

Sandbox Bypass

Apache Syncope is vulnerable to a Sandbox bypass. The vulnerability is due to improper isolation of the Groovy security sandbox, where an administrator with sufficient entitlements can create a malicious Groovy class containing untrusted code, and attackers can bypass the sandbox to execute...

Malicious code in eyiouss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bedee2fc7da5658522543d3fe376d8fbf1d3bc8386eb8f53df3ee080830b250 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15836 Malicious code in eyiouss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bedee2fc7da5658522543d3fe376d8fbf1d3bc8386eb8f53df3ee080830b250 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in vitest-cli-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1262dc722ebac3b91301efde91e61df9ec9f65ccf91e51c15da53f9b518878b2 Package published as vitest-cli-pro ships a verbatim copy of nodemailer as cover; its declared postinstall runs lib/utils/index.js, which detaches a...

MAL-2026-15818 Malicious code in vitest-cli-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1262dc722ebac3b91301efde91e61df9ec9f65ccf91e51c15da53f9b518878b2 Package published as vitest-cli-pro ships a verbatim copy of nodemailer as cover; its declared postinstall runs lib/utils/index.js, which detaches a...

Malicious code in peertube-plugin-poc-marker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff307f6227ac4a9217a899b419a6931ddfe0376cb0cc6ba3570c0f589247241c index.js runs id; uname -a; hostname; date -u; ls -d /var/www/peertube via execSync when PeerTube invokes the plugin's register hook, then POSTs the...

MAL-2026-15817 Malicious code in peertube-plugin-poc-marker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff307f6227ac4a9217a899b419a6931ddfe0376cb0cc6ba3570c0f589247241c index.js runs id; uname -a; hostname; date -u; ls -d /var/www/peertube via execSync when PeerTube invokes the plugin's register hook, then POSTs the...

Malicious code in eslint-rxjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2794273ee7e40da4b37c017636209acf1402b1104ab5fc265a43cc7d83228e72 eslint-rxjs is a masquerade package whose npm metadata is internally inconsistent: the name references ESLint/RxJS, the description reads 'Integrate...