237680 matches found
CVE-2026-59873 vulnerabilities
Vulnerabilities for packages: npm, wazuh-dashboard-fips, gitlab-rails-ce, kibana, wazuh-dashboard, actions-runner, tensorflow-gpu-jupyter, graalvm, jupyter-base-notebook, sqlpad, lerna, pulumi, saf, gitlab-rails-ce-fips, opensearch-dashboards, opensearch-dashboards-fips, homepage, prism,...
CVE-2026-59875 vulnerabilities
Vulnerabilities for packages: npm, wazuh-dashboard-fips, gitlab-rails-ce, kibana, wazuh-dashboard, actions-runner, tensorflow-gpu-jupyter, graalvm, jupyter-base-notebook, sqlpad, lerna, pulumi, saf, gitlab-rails-ce-fips, opensearch-dashboards, opensearch-dashboards-fips, prism, code-server,...
CVE-2026-59875 vulnerabilities
Vulnerabilities for packages: lerna, sqlpad, npm, prism, code-server, kubeflow-centraldashboard, saf, pulumi, jupyter-base-notebook...
CVE-2026-59871 vulnerabilities
Vulnerabilities for packages: lerna, sqlpad, npm, prism, code-server, kubeflow-centraldashboard, saf, pulumi, jupyter-base-notebook...
Malicious Package
Overview nodemon-plint is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2026-10589 Malicious code in nodeaxois (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf1f3f7342689c11ad7e8c17a1c584fe3ce15615db82868b289d9613b48a41a The package declares scripts.postinstall: node.init.js, which runs automatically on npm install. The.init.js script collects host metadata os.hostnam...
MAL-2026-10583 Malicious code in chalkdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31c82b41c09114082b8c0ac8ba6f7bf5ffad8b7da40478ce409443ef00171619 chalkdev is a near-empty package index.js exports , 11-byte README whose sole runtime behavior is a postinstall hook that runs .init.js on npm instal...
Malicious code in momenntjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aae445dd0b77bd7409820067097404e4ccb16d658e7911c7c4e659146fdfad4 momenntjs is a typosquat of momentjs whose package.json postinstall hook runs node.init.js. On npm install,.init.js enumerates roughly 60...
Malicious code in yargsplus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ae65e1d6362744681f51216b451ba9889176b3b0c28b1b4c943f1b5033fdd4 The package declares a postinstall hook node.init.js that runs automatically on npm install. The script enumerates roughly 60 credential and CI...
MAL-2026-10590 Malicious code in openaiwrapper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3d691208e7e5c443aa161241ca12c9b3eacb1b04428f886ea8c5fbec5a4d0c The package's postinstall lifecycle hook runs.init.js, which reads a hardcoded list of credential-shaped environment variables including NPMTOKEN,...
ROOT-APP-NPM-CVE-2026-8159 CVE-2026-8159 in @rootio/multiparty - Patched by Root
Root has patched CVE-2026-8159 in the @rootio/multiparty package for Root:npm. Multiple fixed versions available...
Malicious Package
Overview @oliviamcdaniel12/safer-buffer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
Malicious code in bimi-maker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4e6202887cfa87e6dcff6e37af854445a0e44f38b25ef6d3e40fec06cc8b5f On npm install, the package's preinstall hook runs node index.js, which executes whoami and id via childprocess and collects os.hostname, os.userInfo...
MAL-2026-10579 Malicious code in bimi-maker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4e6202887cfa87e6dcff6e37af854445a0e44f38b25ef6d3e40fec06cc8b5f On npm install, the package's preinstall hook runs node index.js, which executes whoami and id via childprocess and collects os.hostname, os.userInfo...
M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actions
Detect and mitigate malicious @asyncapi npm packages linked to the latest npm supply chain attack...
Malicious code in vite-plugin-config-paths (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c7307466b955fa9b453e949ec2fda3153e5c444b906eed5e3bc88d190a33a7 Package name impersonates the widely-used vite-plugin-tsconfig-paths the package.json homepage points to the legitimate plugin's README, and the READ...
Malicious code in @akshajrawat/plugin-repo-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596ef9a9a6888c00110ee80e3633052ed89887a8465e9a5eaa824a81e5211e46 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious Package
Overview @tonsdk/core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview micro-ui-loader is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in @cw-ui/asio-neon-themes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd2366d31cefc8f66861e0e65c782a88c46dc9232d11d463a9fa2869c73dcaa On npm install, postinstall.js reads os.hostname and embeds it as a query parameter in a plain-HTTP GET to a bare IPv4 address...