138453 matches found
MAL-2026-274 Malicious code in chakra-ui-2--styled-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8febe083a3c8d9449ea02eb0ab1ab112c8ea582743da6ce1f0ee9f0cb9d4d5 The package chakra-ui-2--styled-system was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-3072
Malicious code in focus-trap-v2 npm...
EUVD-2026-3048
Malicious code in zis-common-lib npm...
Malicious code in @spx-delivery/react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03f32e2859ef16f71897fc985589e436c704979df087b57bb61fedb63e89c51 The package @spx-delivery/react was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-3105
Malicious code in @ux-foundry/palette npm...
EUVD-2026-3087
Malicious code in assurance-common-components npm...
Malicious code in auc-2-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e297b55770beaa44ea75ef40774c7d7a85d59f159064ae214fa0b936dd419adc The package auc-2-lib was found to contain malicious code. Source: ghsa-malware ea6ea4e26dd3bc412ff291724e99c5eae5d0eaf9ab820a4bfa633eba95fddaba Any...
EUVD-2026-3103
Malicious code in @wbgo/shared npm...
Malicious code in experian-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629f30cfc3fe4cc45698b5cce11973037d0fa7f6564fc999aef0247701f6fee5 The package experian-design-system was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-3073
Malicious code in experian-design-system npm...
MAL-2026-282 Malicious code in experian-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629f30cfc3fe4cc45698b5cce11973037d0fa7f6564fc999aef0247701f6fee5 The package experian-design-system was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-2842
Malicious code in webmd-page-common npm...
EUVD-2026-2846
Malicious code in silvermine npm...
MAL-2026-257 Malicious code in silvermine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b977fbc50506142e7db68fc536bdfd96ccfa135ff0c03f3957d24b716cc4441 The package silvermine was found to contain malicious code. Source: ghsa-malware 194377d773e651f6f01c9662fac716fb338b55f83baafc1c503b692fe1195e5a Any...
EUVD-2026-2096
Renovate vulnerable to arbitrary command injection via npm manager and malicious Renovate configuration...
Renovate vulnerable to arbitrary command injection via npm manager and malicious Renovate configuration
Summary The user-provided string packageName in the npm manager is appended to the npm install command during lock maintenance without proper sanitization. Details Adversaries can provide a maliciously crafted Renovate configuration file to trick Renovate to execute arbitrary code. The...
EUVD-2026-2403
Malicious code in ts-tweetnacl npm...
EUVD-2026-2401
Malicious code in admin1001 npm...