Malicious code in node-sysmon-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612887c8528ff96b3bc3a61d678b6376099480c080d2d8a0960fe7798ac25f33 On module load, index.js reconstructs a hex-encoded URL Buffer.from'687474703a2f2f3135322e35332e3132302e39302f636d64','hex' that decodes to...

MAL-2026-10465 Malicious code in node-sysmon-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612887c8528ff96b3bc3a61d678b6376099480c080d2d8a0960fe7798ac25f33 On module load, index.js reconstructs a hex-encoded URL Buffer.from'687474703a2f2f3135322e35332e3132302e39302f636d64','hex' that decodes to...

Exploit for Code Injection in Ejs

Seal Security — JavaScript npm Example A minimal, intention...

aioambient (1.0.2), firex-flame (>=2.1.0, <=2.5.35) +2 more potentially affected by CVE-2026-48802 via python-engineio (3.10.0)

python-engineio PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient 1.0.2 - firex-flame =2.1.0, =2.2.3, =2.2.3, =2.3.5 Source cves: CVE-2026-48802 Source advisory: OSV:PYSEC-2026-3032...

aioambient (1.0.2), firex-flame (>=2.1.0, <=2.5.35) +2 more potentially affected by CVE-2026-48809 via python-engineio (3.10.0)

python-engineio PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient 1.0.2 - firex-flame =2.1.0, =2.2.3, =2.2.3, =2.3.5 Source cves: CVE-2026-48809 Source advisory: OSV:PYSEC-2026-3033...

vantage6-node (3.9.0rc4), vantage6-server (3.9.0rc4) potentially affected by CVE-2026-54445 via vantage6 (3.9.0rc4)

vantage6 PYPI version 3.9.0rc4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.9.0rc4 - vantage6-server 3.9.0rc4 Source cves: CVE-2026-54445 Source advisory: OSV:PYSEC-2026-3400...

vantage6-node (3.8.2rc1), vantage6-server (3.8.2rc1) potentially affected by CVE-2026-54445 via vantage6 (3.8.2rc1)

vantage6 PYPI version 3.8.2rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.2rc1 - vantage6-server 3.8.2rc1 Source cves: CVE-2026-54445 Source advisory: OSV:PYSEC-2026-3400...

vantage6-node (>=3.0.0b4, <=3.0.2), vantage6-server (>=0.0.0b0, <=3.0.2) potentially affected by CVE-2026-54445 via vantage6 (3.0.2)

vantage6 PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node =3.0.0b4, =0.0.0b0, =3.0.2 Source cves: CVE-2026-54445 Source advisory: OSV:PYSEC-2026-3400...

vantage6-node (3.1.0rc6), vantage6-server (3.1.0rc6) potentially affected by CVE-2026-54533 via vantage6 (3.1.0rc6)

vantage6 PYPI version 3.1.0rc6 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.1.0rc6 - vantage6-server 3.1.0rc6 Source cves: CVE-2026-54533 Source advisory: OSV:PYSEC-2026-3401...

vantage6-algorithm-store (4.6.0rc3), vantage6-node (4.6.0rc3) +1 more potentially affected by CVE-2026-54445 via vantage6 (4.6.0rc3)

vantage6 PYPI version 4.6.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.6.0rc3 - vantage6-node 4.6.0rc3 - vantage6-server 4.6.0rc3 Source cves: CVE-2026-54445 Source advisory:...

vantage6-node (3.3.6), vantage6-server (3.3.6) potentially affected by CVE-2026-54445 via vantage6 (3.3.6)

vantage6 PYPI version 3.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.6 - vantage6-server 3.3.6 Source cves: CVE-2026-54445 Source advisory: OSV:PYSEC-2026-3400...

vantage6-node (3.7.0rc2), vantage6-server (3.7.0rc2) potentially affected by CVE-2026-54533 via vantage6 (3.7.0rc2)

vantage6 PYPI version 3.7.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.7.0rc2 - vantage6-server 3.7.0rc2 Source cves: CVE-2026-54533 Source advisory: OSV:PYSEC-2026-3401...

vantage6-node (3.7.0rc1), vantage6-server (3.7.0rc1) potentially affected by CVE-2026-54445 via vantage6 (3.7.0rc1)

vantage6 PYPI version 3.7.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.7.0rc1 - vantage6-server 3.7.0rc1 Source cves: CVE-2026-54445 Source advisory: OSV:PYSEC-2026-3400...

vantage6-node (3.4.2a0), vantage6-server (3.4.2a0) potentially affected by CVE-2026-54445 via vantage6 (3.4.2a0)

vantage6 PYPI version 3.4.2a0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.4.2a0 - vantage6-server 3.4.2a0 Source cves: CVE-2026-54445 Source advisory: OSV:PYSEC-2026-3400...

vantage6-algorithm-store (4.13.7), vantage6-node (4.13.7) +1 more potentially affected by CVE-2026-54533 via vantage6 (4.13.7)

vantage6 PYPI version 4.13.7 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.7 - vantage6-node 4.13.7 - vantage6-server 4.13.7 Source cves: CVE-2026-54533 Source advisory: OSV:PYSEC-2026-340...

vantage6-node (3.0.4), vantage6-server (3.0.4) potentially affected by CVE-2026-54533 via vantage6 (3.0.4)

vantage6 PYPI version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.0.4 - vantage6-server 3.0.4 Source cves: CVE-2026-54533 Source advisory: OSV:PYSEC-2026-3401...

vantage6-node (4.0.0a2), vantage6-server (4.0.0a2) potentially affected by CVE-2026-54445 via vantage6 (4.0.0a2)

vantage6 PYPI version 4.0.0a2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 4.0.0a2 - vantage6-server 4.0.0a2 Source cves: CVE-2026-54445 Source advisory: OSV:PYSEC-2026-3400...

vantage6-node (3.3.0rc4), vantage6-server (3.3.0rc4) potentially affected by CVE-2026-54533 via vantage6 (3.3.0rc4)

vantage6 PYPI version 3.3.0rc4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.0rc4 - vantage6-server 3.3.0rc4 Source cves: CVE-2026-54533 Source advisory: OSV:PYSEC-2026-3401...

vantage6-node (3.8.7rc1), vantage6-server (3.8.7rc1) potentially affected by CVE-2026-54445 via vantage6 (3.8.7rc1)

vantage6 PYPI version 3.8.7rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.7rc1 - vantage6-server 3.8.7rc1 Source cves: CVE-2026-54445 Source advisory: OSV:PYSEC-2026-3400...

vantage6-node (3.5.0rc2), vantage6-server (3.5.0rc2) potentially affected by CVE-2026-54533 via vantage6 (3.5.0rc2)

vantage6 PYPI version 3.5.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.5.0rc2 - vantage6-server 3.5.0rc2 Source cves: CVE-2026-54533 Source advisory: OSV:PYSEC-2026-3401...