bsign-ui (>=0.0.3 <=0.0.5), gc-nimbus-ui (>=3.0.0 <=3.0.12) potentially affected by CVE-2026-47759 via tinymce (>=8.0.2 <=8.2.2)

tinymce NPM version =8.0.2, =0.0.3, =3.0.0, =3.0.12 Source cves: CVE-2026-47759 Source advisory: SNYK:JS-TINYMCE-17056166...

MAL-2025-27544 Malicious code in nimbus_a7mrc_s3tnd_rainbow (npm)

The package nimbusa7mrcs3tndrainbow was found to contain malicious code...