236627 matches found
Malicious code in libsignal-node-travatiger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311b53330c1d8c3546d0b4fa3d460ca694fc20d60608ac5a276f40f7a73279fa On require of this package, index.js schedules install.js which locates @whiskeysockets/baileys in the installer's nodemodules tree searching...
CVE-2026-12151 vulnerabilities
Vulnerabilities for packages: vitess, npm, pelias-api, saf, renovate, prism, kibana, node-gyp, code-server, haraka, py3-captum, actions-runner, gemini-cli...
CVE-2026-6733 vulnerabilities
Vulnerabilities for packages: vitess, npm, pelias-api, saf, renovate, prism, kibana, node-gyp, code-server, haraka, py3-captum, actions-runner, gemini-cli...
GHSA-35P6-XMWP-9G52 vulnerabilities
Vulnerabilities for packages: vitess, npm, pelias-api, saf, renovate, prism, kibana, node-gyp, code-server, haraka, py3-captum, actions-runner, gemini-cli...
GHSA-P88M-4JFJ-68FV vulnerabilities
Vulnerabilities for packages: vitess, npm, pelias-api, saf, renovate, prism, kibana, node-gyp, code-server, haraka, py3-captum, actions-runner, gemini-cli...
CVE-2026-9679 vulnerabilities
Vulnerabilities for packages: vitess, npm, pelias-api, saf, renovate, prism, kibana, node-gyp, code-server, haraka, py3-captum, actions-runner, gemini-cli...
GHSA-G8M3-5G58-FQ7M vulnerabilities
Vulnerabilities for packages: vitess, npm, pelias-api, saf, renovate, prism, kibana, node-gyp, code-server, haraka, py3-captum, actions-runner, gemini-cli...
CVE-2026-11525 vulnerabilities
Vulnerabilities for packages: vitess, npm, pelias-api, saf, renovate, prism, kibana, node-gyp, code-server, haraka, py3-captum, actions-runner, gemini-cli...
MAL-2026-6278 Malicious code in ts-wross (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42dae43b7ff77748f10ae5faf6d87b7d63552e5629a37c931ea2c0de3539b469 Package is published under the name ts-wross but its package.json claims authorship by Michael Mclaughlin [email protected] and points its repository...
CVE-2026-12151 vulnerabilities
Vulnerabilities for packages: renovate, vitess, node-gyp, npm, code-server, prism, saf...
GHSA-P88M-4JFJ-68FV vulnerabilities
Vulnerabilities for packages: renovate, vitess, node-gyp, npm, code-server, prism, saf...
GHSA-G8M3-5G58-FQ7M vulnerabilities
Vulnerabilities for packages: renovate, vitess, node-gyp, npm, code-server, prism, saf...
CVE-2026-6733 vulnerabilities
Vulnerabilities for packages: renovate, vitess, node-gyp, npm, code-server, prism, saf...
CVE-2026-11525 vulnerabilities
Vulnerabilities for packages: renovate, vitess, node-gyp, npm, code-server, prism, saf...
GHSA-VXPW-J846-P89Q vulnerabilities
Vulnerabilities for packages: renovate, vitess, node-gyp, npm, code-server, prism, saf...
CVE-2026-9679 vulnerabilities
Vulnerabilities for packages: renovate, vitess, node-gyp, npm, code-server, prism, saf...
MAL-2026-6305 Malicious code in @frostnode/waitfor (npm)
@frostnode/waitfor malicious versions 0.9.0, 0.10.3, 0.10.4, and 0.10.5, published by [email protected] is a trojanized npm package belonging to the wshu.net credential-stealer campaign. The campaign published trojanized look-alike utility packages across 12+ scopes whose publisher accoun...
Malicious code in forge-jsx4 (npm)
forge-jsx4 is a remote access trojan RAT published to the public npm registry by the account rafaelsilva [email protected]. Versions 1.0.122 and 1.0.123 were published on June 21-22, 2026 as a reconstitution of the forge-jsx / forge-jsxy campaign, reusing the same command-and-control...
Malicious code in @nullzero/urlcat (npm)
@nullzero/urlcat version 1.4.2, published by [email protected] is a trojanized npm package belonging to the wshu.net credential-stealer campaign. The campaign published trojanized look-alike utility packages across 12+ scopes whose publisher accounts all follow the pattern [email protected], with...
Malicious code in @dexwilt/node-fetch (npm)
The @dexwilt/node-fetch package impersonates the legitimate node-fetch project: its package metadata copies the upstream repository, author, and homepage while publishing under an unrelated scope. Its CommonJS entry point lib/index.js contains the expected node-fetch implementation followed by...