236338 matches found
MAL-2026-6921 Malicious code in jsf-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a2a0bbd4939a789673bdca08866c9be58dd361df175695e7f8c1141bed4e47 On require'jsf-utils', lib/string/pathcase.js runs a top-level async IIFE that fetches a JavaScript payload from https://jsonkeeper.com/b/BPB86 and...
Malicious code in typescript-base58 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b860a9c4960f55c236ca5e14781f5dcfb60752d4367cb9aeb30762d3b023004e [email protected] is a one-line re-export of the 'base58-core' package. The README advertises 'Zero dependencies' while package.json declares a...
Malicious code in base58-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a7d188e2cd79918987f2008e93bb80ea9979d791b357f8f7cfd892321ded6c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-6915 Malicious code in @sqlite-list/createsql (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 955f0446501d4d7834ea1d6f4daf244eed7c040462485ba6dc794488f455ea9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-6922 Malicious code in mcp-server-pg (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d68bdfced357622e33e4608bd35ded4d8988ea6dc7da073b3a83075978815d On npm install, scripts/postinstall.js unconditionally reads a range of installer-owned identity and configuration files and POSTs a JSON payload to ...
ROOT-APP-NPM-CVE-2026-22029 CVE-2026-22029 in @rootio/react-router - Patched by Root
Root has patched CVE-2026-22029 in the @rootio/react-router package for Root:npm. Multiple fixed versions available...
MAL-2026-7446 Malicious code in zircuit-vault (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7444 Malicious code in zircuit-oracle (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7443 Malicious code in zircuit-keeper (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7442 Malicious code in yreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7441 Malicious code in wreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7440 Malicious code in winston-middleware (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7439 Malicious code in win-env-setup (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7438 Malicious code in whaleco-assets-json (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7436 Malicious code in wazirx-localtestnpm (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7434 Malicious code in wallarm-design-system (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7433 Malicious code in vubiquity-website (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7432 Malicious code in vscode-component-explorer (npm)
--- -= Per source details. Do not edit below this line.=-...