ROOT-APP-NPM-CVE-2026-47135 CVE-2026-47135 in @rootio/vm2 - Patched by Root

Root has patched CVE-2026-47135 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10716 AIKIDO-2026-10716 in @rootio/vm2 - Patched by Root

Root has patched AIKIDO-2026-10716 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-2CM2-M3W5-GP2F GHSA-2cm2-m3w5-gp2f in @rootio/vm2 - Patched by Root

Root has patched GHSA-2cm2-m3w5-gp2f in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10842 AIKIDO-2026-10842 in @rootio/vm2 - Patched by Root

Root has patched AIKIDO-2026-10842 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10847 AIKIDO-2026-10847 in @rootio/vm2 - Patched by Root

Root has patched AIKIDO-2026-10847 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44001 CVE-2026-44001 in @rootio/vm2 - Patched by Root

Root has patched CVE-2026-44001 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10190 AIKIDO-2026-10190 in @rootio/vm2 - Patched by Root

Root has patched AIKIDO-2026-10190 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47141 CVE-2026-47141 in @rootio/vm2 - Patched by Root

Root has patched CVE-2026-47141 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10718 AIKIDO-2026-10718 in @rootio/vm2 - Patched by Root

Root has patched AIKIDO-2026-10718 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-30547 CVE-2023-30547 in @rootio/vm2 - Patched by Root

Root has patched CVE-2023-30547 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

CVE-2026-46412 Malicious code in @beproduct/nestjs-auth (0.1.2 through 0.1.19) — Mini Shai-Hulud worm

@beproduct/nestjs-auth is a NestJS authentication module for BeProduct IDS Identity Server with OpenID Connect support. Between 2026-05-11 20:19 UTC and 22:56 UTC, an attacker used a compromised npm publish token to publish 18 malicious versions of @beproduct/nestjs-auth 0.1.2 through 0.1.19. The...

ROOT-APP-NPM-CVE-2025-27789 CVE-2025-27789 in @rootio/babel__helpers - Patched by Root

Root has patched CVE-2025-27789 in the @rootio/babelhelpers package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-0235 CVE-2022-0235 in @rootio/node-fetch - Patched by Root

Root has patched CVE-2022-0235 in the @rootio/node-fetch package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-22036 CVE-2026-22036 in @rootio/undici - Patched by Root

Root has patched CVE-2026-22036 in the @rootio/undici package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-1525 CVE-2026-1525 in @rootio/undici - Patched by Root

Root has patched CVE-2026-1525 in the @rootio/undici package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-12151 CVE-2026-12151 in @rootio/undici - Patched by Root

Root has patched CVE-2026-12151 in the @rootio/undici package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-9595 CVE-2026-9595 in @rootio/webpack-dev-server - Patched by Root

Root has patched CVE-2026-9595 in the @rootio/webpack-dev-server package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-30359 CVE-2025-30359 in @rootio/webpack-dev-server - Patched by Root

Root has patched CVE-2025-30359 in the @rootio/webpack-dev-server package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-9678 CVE-2026-9678 in @rootio/undici - Patched by Root

Root has patched CVE-2026-9678 in the @rootio/undici package for Root:npm. Multiple fixed versions available...

Malicious code in relativity-pdfjs-dist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c48b9caf30af59020f36b25fb13fb54db5754b9d8ad311f857843171cc88915a The OpenSSF Package Analysis project identified 'relativity-pdfjs-dist' @ 5.8.2 npm as malicious. It is considered malicious because: - The...