236261 matches found
MAL-2026-960 Malicious code in hardhta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc27417b62c3ad399e369577764608120ee2b3662367f1d51bf5fb8378560bcf The package hardhta was found to contain malicious code. Source: ghsa-malware e4174e96a92d9c0d7bbe499ed40d2e4cab9635c61471a1602fd117d8115e2d38 Any...
MAL-2026-970 Malicious code in secp256 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5474e89cc8b0f2d2e5c37d3a2bad92455e82535d614d82fb0ff96979ba1ac2d3 The package secp256 was found to contain malicious code. Source: ghsa-malware 12775af1dc40ed0560ed3a8265ad9a1c9a122b3860a9f081e190b2ad8f30ba5d Any...
Malicious Package
Overview hardhta is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in rimarf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2b9a60774917db6a41edfa73a6fd3857866642eb502367b1d1551d9a1bc0f3 The package rimarf was found to contain malicious code. Source: ghsa-malware a34f8c6537be93ad97761160da11ce153ecb0e128aa76add4d2c46671c4de0c1 Any...
Malicious code in hardhta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc27417b62c3ad399e369577764608120ee2b3662367f1d51bf5fb8378560bcf The package hardhta was found to contain malicious code. Source: ghsa-malware e4174e96a92d9c0d7bbe499ed40d2e4cab9635c61471a1602fd117d8115e2d38 Any...
Malicious code in cloude-code (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec24ba80068a14617a513915da6a3751b60345b9c1e9144a362c4b85abefdc6 The package cloude-code was found to contain malicious code. Source: ghsa-malware 8da7714f501eed0c20e3432333dc73d1707e7ef16a803df07b6d73fab1945be7 An...
Malicious Package
Overview suport-color is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2026-952 Malicious code in claud-code (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858992810c1a4133d95b6fa19033c07591db548a46df39b67e0d393d7dd212ad The package claud-code was found to contain malicious code. Source: ghsa-malware 5fe9842d778d45ad5b5e4d81db678d608711dd4b186e053569dae6f210481651 Any...
MAL-2026-966 Malicious code in opencraw (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaed661cc51e76234fc6cba7587b973903e00bbacd33da7114aeb726d957b577 The package opencraw was found to contain malicious code. Source: ghsa-malware 5bc39adf3939792f918a50cbc9a9952a11d950e361d83d5631449f20ad634945 Any...
Malicious Package
Overview cloude is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
CVE-2026-26996 vulnerabilities
Vulnerabilities for packages: prism, tileserver-gl, npm, eslint, sqlpad, opensearch-dashboards, pnpm-stage0, lerna, rancher-api-ui, serve, code-server, vitess, argo-workflows, ts-patch, pulumi, py3-jupyterlab, saf, kubeflow-centraldashboard, langfuse, node-gyp, kubeflow-katib, kubeflow-pipelines,...
GHSA-3PPC-4F35-3M26 vulnerabilities
Vulnerabilities for packages: prism, tileserver-gl, npm, eslint, sqlpad, opensearch-dashboards, pnpm-stage0, lerna, rancher-api-ui, serve, code-server, vitess, argo-workflows, ts-patch, pulumi, py3-jupyterlab, saf, kubeflow-centraldashboard, langfuse, node-gyp, kubeflow-katib, kubeflow-pipelines,...
CVE-2026-26996 vulnerabilities
Vulnerabilities for packages: rancher-api-ui, serve, wazuh-dashboard, tileserver-gl-fips, wazuh-dashboard-fips, langfuse-fips, graalvm, ts-patch, authentik, semaphore, drupal, eslint, sqlpad, tileserver-gl, langfuse, gemini-cli, kubeflow-katib, saf, prism, opensearch-dashboards-fips, vitess,...
GHSA-3PPC-4F35-3M26 vulnerabilities
Vulnerabilities for packages: rancher-api-ui, serve, wazuh-dashboard, tileserver-gl-fips, wazuh-dashboard-fips, langfuse-fips, graalvm, ts-patch, authentik, semaphore, drupal, eslint, sqlpad, tileserver-gl, langfuse, gemini-cli, kubeflow-katib, saf, prism, opensearch-dashboards-fips, vitess,...
MAL-2026-945 Malicious code in ui5-cap-event-app-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837e841e2b75385a4e7c030237983cfe52f91373ffa3e56859c7055ac0a80f4d The package ui5-cap-event-app-server was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in abcxyzz (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b953a8183a1a7ba906c9117e8afe658b2606311b606d8b3ecad680076fc51e9 The package abcxyzz was found to contain malicious code. Source: ossf-package-analysis b22a45e3a267d5930d5e8dfdb52954bf049c7b63a9bdb0818e5daff1191e74...
OpenClaw Affected by Remote Code Execution via System Prompt Injection in Slack Channel Descriptions
Summary When the Slack integration is enabled, Slack channel metadata topic/description could be incorporated into the model's system prompt. Impact Prompt injection is a documented risk for LLM-driven systems. This issue increased the injection surface by allowing untrusted Slack channel metadat...
Malicious code in vds-monarch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9fc03a6a0feff43eef44ac91f0e9ce68c422a439528842f139bf1164366c66d The package vds-monarch was found to contain malicious code. Source: ghsa-malware 23d64f4764ccc88b26aa567b6d6828093fe8d35500ac67a19ced44828073dbf4 An...
Malicious code in realestate-ask (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4db310e1c17bbf02575dc3a75ab56d4d38581001d31617c583443f7d88a126 The package realestate-ask was found to contain malicious code. Source: ghsa-malware 75a155e1870bd51f018f66476427d1da99c87cbbcab800c354dad13f76b67c3b...
MAL-2026-922 Malicious code in compass-e2e-tests (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a245065291bd7252411254769a1764aab8e228c8ca161708734a3d47d3c9ec The package compass-e2e-tests was found to contain malicious code. Source: ghsa-malware...