MAL-2026-474 Malicious code in @transaction-list/transaction-list-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5e5850b5f3f231ca816e6f9c5ae2f7dac1b33092f12407be92abe5f1e26d4a The package @transaction-list/transaction-list-md was found to contain malicious code...

CVE-2026-0775

npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of npm cli. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...

npm CLI security vulnerabilities

npm CLI is a package manager developed by the American company npm. There is a security vulnerability in npm CLI, which stems from loading modules from insecure locations, potentially leading to privilege escalation and the execution of arbitrary code...

CVE-2026-24001 vulnerabilities

Vulnerabilities for packages: langfuse-fips, grafana, argo-workflows, ts-patch, renovate, graalvm, vitess, drupal, kubeflow-katib, sqlpad, tileserver-gl, prism, librechat, tileserver-gl-fips, npm, grafana-fips, langfuse, semaphore, saf, actions-runner, thingsboard-fips, thingsboard, redisinsight...

EUVD-2026-4179

Malicious code in uuu8lgd npm...

Malicious code in uuu8lgd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1048ec8371fbc694883c71f227674b6b7ba3dcf534b1ed096ce4342a6e129920 The package uuu8lgd was found to contain malicious code. Source: ossf-package-analysis 07f7eda587433e48aed22a16c8f76973b55a61815311f38620239874795203...

Malicious code in @ikeacn/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61cac48e6bd5a0c800a2b821dafa52f34ae61a0592089305f0f308b264390b0 The package @ikeacn/utils was found to contain malicious code. Source: ghsa-malware 25e3e51050a140b96f55be4f132f695cd77cf380a7a0dea9e48bde3b5064df7c...

EUVD-2026-4183

Malicious code in @ikeacn/utils npm...

MAL-2026-464 Malicious code in @ikeacn/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ddd87692493182b2706890d61f428455b6686768925e979c7ad73ed8aed0b8 The package @ikeacn/icons was found to contain malicious code. Source: ghsa-malware 1fd9107408adaea60e793eab4b396b70fa0ec9b4dff087a3f16e52eb21be6450...

EUVD-2026-4187

Malicious code in @corp-front/corporate-filter-company-select npm...

Malicious code in corporate-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a096b32dfa76f7e64480d72862c34ec7e644ac03db51ad09af0eb1f929d637a1 The package corporate-blocking was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2026-4188

Malicious code in corporate-blocking npm...

EUVD-2026-4186

Malicious code in pay-by-bank-dashboard-server npm...

MAL-2026-459 Malicious code in un112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1521874d670863316d54ec7213c067617cac71476025f1e398ca9ea01fe1f71 The package un112 was found to contain malicious code. Source: ossf-package-analysis cdd54832c7f264a3a18301f19d464ca271573a29173fe997e49e6c55b0ae1f87...

EUVD-2026-4185

Malicious code in un112 npm...

Malicious code in un112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1521874d670863316d54ec7213c067617cac71476025f1e398ca9ea01fe1f71 The package un112 was found to contain malicious code. Source: ossf-package-analysis cdd54832c7f264a3a18301f19d464ca271573a29173fe997e49e6c55b0ae1f87...

EUVD-2026-4191

Malicious code in @mailpoet/component npm...

Malicious code in @mailpoet/component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d48b40574c65ef747944583fa5a49ac40b673d6932a02247c2cdbd5331a79179 The package @mailpoet/component was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-4192

Malicious code in @fortinet/fortigate-autoscale npm...

Malicious code in @fortinet/fortigate-autoscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6100c8f444b32630601fbeee65c6af9df19979345ea5dc04740f40356c188e06 The package @fortinet/fortigate-autoscale was found to contain malicious code. Source: ghsa-malware...