MAL-2026-14098 Malicious code in utils-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd71448526f4ee786e1e42e6bdb66627a4f5e8fac78ddb8e8205bd26cc1b0dcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14079 Malicious code in elf-stats-cranberry-wishlist-933 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fcbc300aedf740c98f076d87915e27c394b15951161ba52fb5a0583b9585770 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in elf-stats-cranberry-wishlist-933 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fcbc300aedf740c98f076d87915e27c394b15951161ba52fb5a0583b9585770 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14078 Malicious code in elf-stats-caroling-stocking-510 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf95a37aa32ab86e8c0039afad9eeb640550fd14146fdf94e39b08c33b4769c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in elf-stats-caroling-stocking-510 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf95a37aa32ab86e8c0039afad9eeb640550fd14146fdf94e39b08c33b4769c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thepackagethatworks_ (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f15296c09e590124cd0c48b05fe2a07d3a2c798fe5ffe5bbc01fa91e1eeb18c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14082 Malicious code in google-logging-utils-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60ff4b97c24301c3b850c5c7f2c1a6dfc07c695c2b19c879cc766373f1c2ded2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-logging-utils-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60ff4b97c24301c3b850c5c7f2c1a6dfc07c695c2b19c879cc766373f1c2ded2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mw-filesystem-events-nodream-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e79317db717bd6c38646bef40f0e5205e0f42a3174319f95d9b5e7153cc8fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14087 Malicious code in mw-filesystem-events-nodream-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e79317db717bd6c38646bef40f0e5205e0f42a3174319f95d9b5e7153cc8fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14093 Malicious code in rtms-manager-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dcee6487432651f905e12482d6a32a94b390cac60f6ece90ac93432d76763af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rtms-manager-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dcee6487432651f905e12482d6a32a94b390cac60f6ece90ac93432d76763af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14080 Malicious code in expect-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17d9530bd098ecda5041341a338be1a2cfaab1f19e907252bbc95cdd2577dba1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in expect-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17d9530bd098ecda5041341a338be1a2cfaab1f19e907252bbc95cdd2577dba1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nolimitcity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdd2f231bad56627ee2a46c05b99f33c745f97daaf7e05adbfbfcea535d7f530 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14094 Malicious code in saps_secplayground_npm_ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13fa9c8b7672d88eb66c92e717080df3e10efc1b6f881b2f7361af0a5a7fbb37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in saps_secplayground_npm_ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13fa9c8b7672d88eb66c92e717080df3e10efc1b6f881b2f7361af0a5a7fbb37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fr-ito-web-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8b1f66710b1d0686f5d0a6df5989a01bb20a875e380eed8e4be7b94870372e Package's package.json declares both preinstall and postinstall lifecycle hooks that execute node exfil.js on npm install. exfil.js runs whoami and i...

MAL-2026-14019 Malicious code in fr-ito-web-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8b1f66710b1d0686f5d0a6df5989a01bb20a875e380eed8e4be7b94870372e Package's package.json declares both preinstall and postinstall lifecycle hooks that execute node exfil.js on npm install. exfil.js runs whoami and i...

nodejs:24 security update

nodejs 1:24.18.0-3 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 5.9.0 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223388 RHEL-223907 RHEL-223792 1:24.18.0-3 - Backport patch update sqlite to 3.53.4 Fixes: CVE-2026-11824, CVE-2026-11822...