137247 matches found
MAL-2026-11021 Malicious code in @bcryptln/bcryptjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d8447904424d1fd6085c58e7a0adec80bad268c96395c885d104ee80da79c2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
NPM: Next.js: Unbounded Server Action payload in Edge runtime
NPM: Next.js: Unbounded Server Action payload in Edge runtime vulnerability discovered by ? in WordPress Npm next versions = 13.0.0, 15.5.21...
MAL-2026-11012 Malicious code in encryptstringadmin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e862c6a1d5cf9a77c2060f767e7144e9a73b77913c801dbf23f571ca5d3e054 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in encryptstringadmincore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb9468e3d6f153d718527bb4350b6593d64b67cf16b5b81cdf56e4781d1b483 The package's main module core.js is heavily obfuscated obfuscator.io-style string-array with self-defending anti-debug and control-flow flattening a...
MAL-2026-11013 Malicious code in encryptstringadmincore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb9468e3d6f153d718527bb4350b6593d64b67cf16b5b81cdf56e4781d1b483 The package's main module core.js is heavily obfuscated obfuscator.io-style string-array with self-defending anti-debug and control-flow flattening a...
MAL-2026-10983 Malicious code in svelte-streaks (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b07b98d6a7986da479ed75708e37dfbff0df7a6ee136f7dad1db24087bed2cf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10984 Malicious code in veskra (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4618cc8c89ff606f81079aef2e98920220ca9e59ec284c8d6c18167208604a3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-10980 Malicious code in nolby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8bc0fa5eb23a45d27933ce1d32b7fabed27182039e170dbcaa38c0462dfa20 The package advertises itself as a pure calendar/streak math library with no import-time side effects, but index.mjs invokes a top-level sync on modu...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: kibana, pulumi, wazuh-dashboard-fips, gitlab-rails-ce-fips, code-server, graalvm, opensearch-dashboards, saf, sqlpad, wazuh-dashboard, homepage, prism, npm, lerna, opensearch-dashboards-fips, actions-runner, gitlab-rails-ce, kubeflow-centraldashboard...
GHSA-W8WR-V893-VJVP vulnerabilities
Vulnerabilities for packages: kibana, pulumi, wazuh-dashboard-fips, gitlab-rails-ce-fips, code-server, graalvm, opensearch-dashboards, saf, sqlpad, wazuh-dashboard, homepage, prism, npm, lerna, opensearch-dashboards-fips, actions-runner, gitlab-rails-ce, kubeflow-centraldashboard...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: kibana, pulumi, wazuh-dashboard-fips, gitlab-rails-ce-fips, code-server, graalvm, opensearch-dashboards, saf, sqlpad, wazuh-dashboard, homepage, prism, npm, lerna, opensearch-dashboards-fips, actions-runner, gitlab-rails-ce, kubeflow-centraldashboard...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: kibana, pulumi, wazuh-dashboard-fips, gitlab-rails-ce-fips, code-server, graalvm, opensearch-dashboards, saf, sqlpad, wazuh-dashboard, prism, npm, lerna, opensearch-dashboards-fips, actions-runner, gitlab-rails-ce, kubeflow-centraldashboard...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: lerna, code-server, kubeflow-centraldashboard, prism, sqlpad, saf, npm, pulumi...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: lerna, code-server, kubeflow-centraldashboard, prism, sqlpad, saf, npm, pulumi...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: lerna, code-server, kubeflow-centraldashboard, prism, sqlpad, saf, npm, pulumi...
ROOT-APP-NPM-CVE-2022-24999 CVE-2022-24999 in @rootio/qs - Patched by Root
Root has patched CVE-2022-24999 in the @rootio/qs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44003 CVE-2026-44003 in @rootio/vm2 - Patched by Root
Root has patched CVE-2026-44003 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10689 AIKIDO-2026-10689 in @rootio/vm2 - Patched by Root
Root has patched AIKIDO-2026-10689 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...