138453 matches found
MAL-2026-494 Malicious code in eits (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec23b0de809cd836bbc3b47232454674773608dd4429cb3ecd6a45fb5d9c2ee The package eits was found to contain malicious code. Source: ghsa-malware c01b198ab80fdc36e1397f6938db086271de12c3a19de4744858614f97742a6a Any...
EUVD-2026-4518
Malicious code in eits npm...
MAL-2026-497 Malicious code in test-on-other (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaeca000a0d70bc52934cc2047e1924aa1f63f790734f0063a190476e7accdf2 The package test-on-other was found to contain malicious code...
MAL-2026-496 Malicious code in hemi-btc-staking-actions (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19073a10f9ea03f132e59a88b1c0a694120c696aa0be4824281160c7bfffb56 The package hemi-btc-staking-actions was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-4508
Malicious code in oxnoxon npm...
EUVD-2026-4509
Malicious code in test-on-other-again npm...
Malicious code in test-on-other-again (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c2b4e18e26bfe221e4ebcdaa18a271ea746bee1977c35172726fd753a923897 The package test-on-other-again was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2026-4510
Malicious code in rank4222wun npm...
MAL-2026-489 Malicious code in rank4222wun (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8943e200fcb8e9490a807104f88b84a3de7f0755cf78db6eabf1622e2116b7bb The package rank4222wun was found to contain malicious code. Source: ghsa-malware b038264ab3a4c0c18b74f04b49afed8d46c5294841a752da7aa3455b32eaa8e1 An...
EUVD-2026-4511
Malicious code in ntwsx npm...
Malicious code in a5xm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59318b8cded3eb39d4e5d1cf0e5320f1a6642ee9cf10efada20f75811ca117a2 The package a5xm was found to contain malicious code. Source: ghsa-malware af04e818925f6a7dfdce51341c120a1afe18e57ef12daa899e5246aafd56297f Any...
MAL-2026-486 Malicious code in a5xm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59318b8cded3eb39d4e5d1cf0e5320f1a6642ee9cf10efada20f75811ca117a2 The package a5xm was found to contain malicious code. Source: ghsa-malware af04e818925f6a7dfdce51341c120a1afe18e57ef12daa899e5246aafd56297f Any...
EUVD-2026-4512
Malicious code in ntwsc npm...
EUVD-2026-4513
Malicious code in a5xm npm...
Malicious Package
Overview a4wu is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
EUVD-2026-4514
Malicious code in a4wu npm...
GHSA-3966-F6P6-2QR9 Duplicate Advisory: npm cli Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Duplicate Advisory This advisory has been withdrawn because describes a dependency bump and therefore, per CVE CNA rule 4.1.12, is a duplicate of GHSA-34x7-hfp2-rc4v/CVE-2026-24842. Additionally, per https://github.com/npm/cli/issues/8939issuecomment-3862719883, npm cli should not be listed as an...
Duplicate Advisory: npm cli Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Duplicate Advisory This advisory has been withdrawn because describes a dependency bump and therefore, per CVE CNA rule 4.1.12, is a duplicate of GHSA-34x7-hfp2-rc4v/CVE-2026-24842. Additionally, per https://github.com/npm/cli/issues/8939issuecomment-3862719883, npm cli should not be listed as an...
CVE-2026-0775 npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability
npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of npm cli. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...