CVE-2026-24001 vulnerabilities

Vulnerabilities for packages: grafana, ts-patch, thingsboard, langfuse, saf, redisinsight, semaphore, librechat, npm, actions-runner, tileserver-gl, vitess, graalvm, grafana-fips, langfuse-fips, renovate, thingsboard-fips, sqlpad, tileserver-gl-fips, prism, kubeflow-katib, argo-workflows, drupal...

Malicious code in uuu8lgd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1048ec8371fbc694883c71f227674b6b7ba3dcf534b1ed096ce4342a6e129920 The package uuu8lgd was found to contain malicious code. Source: ossf-package-analysis 07f7eda587433e48aed22a16c8f76973b55a61815311f38620239874795203...

EUVD-2026-4183

Malicious code in @ikeacn/utils npm...

Malicious code in @ikeacn/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61cac48e6bd5a0c800a2b821dafa52f34ae61a0592089305f0f308b264390b0 The package @ikeacn/utils was found to contain malicious code. Source: ghsa-malware 25e3e51050a140b96f55be4f132f695cd77cf380a7a0dea9e48bde3b5064df7c...

EUVD-2026-4187

Malicious code in @corp-front/corporate-filter-company-select npm...

Malicious code in corporate-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a096b32dfa76f7e64480d72862c34ec7e644ac03db51ad09af0eb1f929d637a1 The package corporate-blocking was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2026-4188

Malicious code in corporate-blocking npm...

EUVD-2026-4186

Malicious code in pay-by-bank-dashboard-server npm...

MAL-2026-459 Malicious code in un112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1521874d670863316d54ec7213c067617cac71476025f1e398ca9ea01fe1f71 The package un112 was found to contain malicious code. Source: ossf-package-analysis cdd54832c7f264a3a18301f19d464ca271573a29173fe997e49e6c55b0ae1f87...

Malicious code in un112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1521874d670863316d54ec7213c067617cac71476025f1e398ca9ea01fe1f71 The package un112 was found to contain malicious code. Source: ossf-package-analysis cdd54832c7f264a3a18301f19d464ca271573a29173fe997e49e6c55b0ae1f87...

EUVD-2026-4185

Malicious code in un112 npm...

Malicious code in @mailpoet/component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d48b40574c65ef747944583fa5a49ac40b673d6932a02247c2cdbd5331a79179 The package @mailpoet/component was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-4191

Malicious code in @mailpoet/component npm...

Malicious Package

Overview @alluxio/common-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in csv-parsing-xz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbd0bb44a5de8aaaa9d2397fe8ff5fa7e9a7274bb5d6efe9ef6af97ba8747692 The package csv-parsing-xz was found to contain malicious code. Source: ghsa-malware 40d41fc1adde6793bd8a6626e41da04bcb68b4934a4760eeb34c278ed6165adf...

EUVD-2026-4196

Malicious code in csv-parsing-xx npm...

EUVD-2026-4197

Malicious code in rank253222 npm...

MAL-2026-448 Malicious code in rank253222 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5018dad195b0f107123f1ab9240ebe4944cd08688982be0c2e9c6203ba9cff1 The package rank253222 was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2026-3709

Malicious code in tv-admin-commons npm...

MAL-2026-437 Malicious code in lumo-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab5d24591ceb311425ae395bd2b1bf7f82818bd6c7946d669a19c619462fd755 The package lumo-api-client was found to contain malicious code. Source: ghsa-malware da916419989a0707bcaa3fc59ba24e3ef90e2ec5df35aa6cc1e81f8d3cb82c6...