137481 matches found
MAL-2026-259 Malicious code in @riag-libs/pattern-library-react-hooks (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64366b918bd4380cf8b087a445df7d86ef18b21686c577a9ed7bdd523aceac64 The package @riag-libs/pattern-library-react-hooks was found to contain malicious code. Source: ghsa-malware...
MAL-2026-315 Malicious code in tailwind-merge-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe4dad53bfa4f2ffe409644975e17958c4a1ab064109707aa6d944c1030b959 The package tailwind-merge-v2 was found to contain malicious code. Source: ghsa-malware...
MAL-2026-293 Malicious code in lusha-micro-app-messages (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2763ac2e60a783720a4825cd416a2c3e991ab820c9a11c72d809c5162eb822 The package lusha-micro-app-messages was found to contain malicious code. Source: ghsa-malware...
MAL-2026-290 Malicious code in kc-fe-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4347dd194760b4442f9bb1feab4f7133c2413af7958a4081f8cdea8367241da The package kc-fe-cli was found to contain malicious code. Source: ghsa-malware 42b0817927a50dccc81b965c476f842127ddf7f97445006910ebc9f6fa9e8026 Any...
MAL-2026-279 Malicious code in dibels8-content (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0822fb035f2f2b218e9bbb86896773e4f423334de708e5fe40ab853a4d22abfe The package dibels8-content was found to contain malicious code. Source: ghsa-malware 68b763b414011b0fcdc784120c3cc7890b7a8bff93ba2d0ea2f43df38880f97...
MAL-2026-286 Malicious code in forms-new-design (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf1f5f8d78c6e26b45ef4a895859922f68ff7afb558284111a34f497681b324 The package forms-new-design was found to contain malicious code. Source: ghsa-malware 45f98af63ec853b571da818f8d974890156b0fd52c9c2ab3fa74a4e213ff3f...
EUVD-2026-3073
Malicious code in experian-design-system npm...
Malicious code in experian-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629f30cfc3fe4cc45698b5cce11973037d0fa7f6564fc999aef0247701f6fee5 The package experian-design-system was found to contain malicious code. Source: ghsa-malware...
MAL-2026-282 Malicious code in experian-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629f30cfc3fe4cc45698b5cce11973037d0fa7f6564fc999aef0247701f6fee5 The package experian-design-system was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-2842
Malicious code in webmd-page-common npm...
MAL-2026-257 Malicious code in silvermine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b977fbc50506142e7db68fc536bdfd96ccfa135ff0c03f3957d24b716cc4441 The package silvermine was found to contain malicious code. Source: ghsa-malware 194377d773e651f6f01c9662fac716fb338b55f83baafc1c503b692fe1195e5a Any...
EUVD-2026-2846
Malicious code in silvermine npm...
EUVD-2026-2096
Renovate vulnerable to arbitrary command injection via npm manager and malicious Renovate configuration...
Renovate vulnerable to arbitrary command injection via npm manager and malicious Renovate configuration
Summary The user-provided string packageName in the npm manager is appended to the npm install command during lock maintenance without proper sanitization. Details Adversaries can provide a maliciously crafted Renovate configuration file to trick Renovate to execute arbitrary code. The...
EUVD-2026-2403
Malicious code in ts-tweetnacl npm...
EUVD-2026-2401
Malicious code in admin1001 npm...
EUVD-2026-2404
Malicious code in cnamts-captcha-component npm...
EUVD-2026-2405
Malicious code in helium-module npm...