186295 matches found
ROOT-APP-NPM-CVE-2026-13697 CVE-2026-13697 in undici - Patched by Root
Root has patched CVE-2026-13697 in the undici package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-30260 CVE-2024-30260 in undici - Patched by Root
Root has patched CVE-2024-30260 in the undici package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-30261 CVE-2024-30261 in undici - Patched by Root
Root has patched CVE-2024-30261 in the undici package for Root:npm. Multiple fixed versions available...
GHSA-7788-GHFQ-C6MH
creationtimestamp| type| source ---|---|--- 2026-08-19 10:31:45+00:00| seen| https://gist.github.com/alon710/0cc60371850e568781debde747fcbd5a...
Malicious code in evm-validation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c551a6031e48a54b550a604e2198a4491cf935407744bba8ef0c11c54086c4 The package advertises EVM address validation but performs no local validation. Its single exported function validatede in index.js issues axios.get...
Malicious code in eth-react-provider (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9bdf79a694cbf6d1a840541b4c47fdac8dc6ac32f4b6a3d4887d5f81233387 The package advertises itself as a React Ethereum provider exporting EthereumProvider/useProvider/useSigner/useNetwork hooks, but the shipped main...
Malicious code in emoji-prints-fancy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163576a0a8b626c88261c8cc54c5049d981015c80145ad36e2710fff5014afbe The package advertises itself as a colorized logger, but dist/index.js requires./logger, which at module load AES-256-CBC-decrypts a hardcoded...
ROOT-APP-NPM-CVE-2026-26996 CVE-2026-26996 in minimatch - Patched by Root
Root has patched CVE-2026-26996 in the minimatch package for Root:npm. Multiple fixed versions available...
Malicious code in gear-composer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f697d2d145e4ade11da0d34433b5f69b46fde8736031c5ffe63af4d2f843eaad The package ships multiple components consistent with an install-time credential harvest and exfiltration pipeline. scripts/postinstall-agent.mjs is...
ROOT-APP-NPM-CVE-2025-24964 CVE-2025-24964 in vitest - Patched by Root
Root has patched CVE-2025-24964 in the vitest package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47429 CVE-2026-47429 in vitest - Patched by Root
Root has patched CVE-2026-47429 in the vitest package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-45623 CVE-2026-45623 in postcss - Patched by Root
Root has patched CVE-2026-45623 in the postcss package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2023-44270 CVE-2023-44270 in postcss - Patched by Root
Root has patched CVE-2023-44270 in the postcss package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-66031 CVE-2025-66031 in node-forge - Patched by Root
Root has patched CVE-2025-66031 in the node-forge package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-33891 CVE-2026-33891 in node-forge - Patched by Root
Root has patched CVE-2026-33891 in the node-forge package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-33896 CVE-2026-33896 in node-forge - Patched by Root
Root has patched CVE-2026-33896 in the node-forge package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-33895 CVE-2026-33895 in node-forge - Patched by Root
Root has patched CVE-2026-33895 in the node-forge package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-33894 CVE-2026-33894 in node-forge - Patched by Root
Root has patched CVE-2026-33894 in the node-forge package for Root:npm. Multiple fixed versions available...