246 matches found
dotenv-diff
dotenv-diff Analizza il tuo codebase per rilevare ogni riferimento a variabili d'ambiente. Ti aiuta a individuare variabili mancanti, inutilizzate, duplicate o usate in modo errato, prima che causino errori a runtime. Supporto di prima classe per SvelteKit, Next.js e Nuxt. Funziona bene anche in...
fix-react2shell-next
fix-react2shell-next Un comando per risolvere CVE-2025-66478 React 2 Shell RCE nella tua app Next.js / React RSC. npx fix-react2shell-next Aggiornamenti di versione deterministici secondo gli advisory ufficiali. Cosa fa 1. Scansiona ricorsivamente tutti i file package.json gestisce monorepo 2...
EU_compliance_MCP
EU Regulations MCP Server ⚰️ EINGESTELLT — in ansvar-mcp-fleet integriert 2026-07-07 Dieses eigenständige Repository ist archiviert. Der eu-regulations-Korpus befindet sich jetzt unter Ansvar-Systems/ansvar-mcp-fleet unter mcps/eu-regulations/ Zusammenführung: Fleet-PR 594; Umstellung: Deploy-PR...
cve-lite-on-pi
cve-lite-on-pi Ein kurzer Bericht über den Lauf von CVE Lite CLI gegen das pi Monorepo und was dabei gefunden wurde. Hintergrund Dieses Experiment wurde durch den Artikel "OWASP CVE Lite CLI – New Tool to Scan for Vulnerabilities in Your Projects" CyberSecurityNews angeregt. Was ist CVE Lite CLI?...
OmniSec-Hex
🛡️ OmniSec-Hex OmniSec-Hex ist ein fortschrittliches, wirkungsvolles Cybersecurity-Monorepo, das sechs leistungsstarke clientseitige Sicherheits- und souveräne Intelligence-Workbanks vereint. Dieses Ökosystem arbeitet vollständig innerhalb browserlokaler Speicherumgebungen mit absoluter...
Malicious Package
Overview cycle-monorepo-sandbox-rxjs-adapter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...
Malicious Package
Overview cycle-monorepo-sandbox-rxjs-run is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...
@antfu/nip (0.1.1), @condu-feature/auto-package-exports (>=1.0.0, <=1.0.3) +92 more potentially affected by unknown CVE via @pnpm/config (>=1002.5.3, <=1004.11.5)
@pnpm/config NPM version =1002.5.3, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.2, =26.2.0, =1.0.6, =0.6.19, =0.1.0-beta.0, =0.3.1 - @mirta/rollup 0.3.5 and more Source cves: unknown CVE Source advisory: SNYK:JS-PNPMCONFIG-19500674...
Malicious Package
Overview carbon-monorepo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in carbon-monorepo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c617e93833344e13d376182fb00c13994a4d2e7f3f8220998e541d77a8e8713 The package's package.json declares a postinstall hook that runs index.js on npm install. index.js collects host reconnaissance and installer secrets...
MAL-2026-14229 Malicious code in carbon-monorepo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c617e93833344e13d376182fb00c13994a4d2e7f3f8220998e541d77a8e8713 The package's package.json declares a postinstall hook that runs index.js on npm install. index.js collects host reconnaissance and installer secrets...
Malicious code in pob-test-package-in-monorepo (npm)
npm/pob-test-package-in-monorepo is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11980 Malicious code in pob-test-package-in-monorepo (npm)
npm/pob-test-package-in-monorepo is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11764 Malicious code in @ornikar/monorepo-config (npm)
npm/@ornikar/monorepo-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11981 Malicious code in pob-test-typescript-package-in-monorepo (npm)
npm/pob-test-typescript-package-in-monorepo is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...
Malicious code in pob-test-typescript-package-in-monorepo (npm)
npm/pob-test-typescript-package-in-monorepo is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...
CVE-2026-54753
A flaw was found in Nx, a monorepo solution for managing multiple projects. The local HTTP server, started by the nx graph command, incorrectly sent an Access-Control-Allow-Origin: header in its responses. This misconfiguration allows a remote attacker to read sensitive project information, such ...
Malicious code in notepad-monorepo (npm)
--- -= Per source details. Do not edit below this line.=-...