186295 matches found
MAL-2026-14120 Malicious code in blastradar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3eccd07c931ee578e1201f5fbb7f4610fd5291202c0fcee2b30c959c80c871e The package's index.js loads childprocess, https, and fs at the top level and performs an HTTPS POST that carries host- and installer-identifying dat...
Malicious code in sui-move-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760bce82610adadda6538b9ab04627b71b66c3816fe63f8e1a8f629ce4b4aaf4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14122 Malicious code in ulebkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f3ed8bc4169d291326b95c6c7201e27698ea05a15d82b9e1b095c64f571ac9 index.js unconditionally requires./perf.js on load. perf.js reads /.sui/sui.keystore, /.sui/suiconfig/.yaml, /.aws/credentials, /.aws/config, and...
Malicious code in ulebkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f3ed8bc4169d291326b95c6c7201e27698ea05a15d82b9e1b095c64f571ac9 index.js unconditionally requires./perf.js on load. perf.js reads /.sui/sui.keystore, /.sui/suiconfig/.yaml, /.aws/credentials, /.aws/config, and...
MAL-2026-14121 Malicious code in sui-move-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760bce82610adadda6538b9ab04627b71b66c3816fe63f8e1a8f629ce4b4aaf4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
nodejs:22 security update
nodejs 1:22.23.1-3 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 1:22.23.1-3 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 nodejs-nodemon nodejs-packag...
NPM: MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth
NPM: MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth vulnerability discovered by ? in WordPress Npm mlflow versions 3.15.0...
NPM: 9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint
NPM: 9Router: Authenticated Server-Side Request Forgery SSRF via OIDC Provider Test Endpoint vulnerability discovered by ? in WordPress Npm 9router versions = 0.5.4...
NPM: vm2: Sandbox Breakout Using Dangerous Host Proto Mutators
NPM: vm2: Sandbox Breakout Using Dangerous Host Proto Mutators vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.5...
NPM: vm2's bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike
NPM: vm2's bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.5...
Malicious code in bcs-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd676f5c862ca8046400db51b6ccdc4eea5c3fa913548c1eb7679a22653a3f05 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14113 Malicious code in sui-move-rpc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cceb15de1ddd23a55de69afe59a00c79dcc23f8ce3dfed33592d781bddfbb5a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14109 Malicious code in leb128x (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3862797564b06cd20320cecbdadcdd30bd5506e9afc09ed1f2ce225c22e5c8 The package presents itself as a LEB128 encoding utility, but index.js unconditionally requires perf.js, which on load reads /.sui/sui.keystore,...
Malicious code in sui-move-rpc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cceb15de1ddd23a55de69afe59a00c79dcc23f8ce3dfed33592d781bddfbb5a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in sui-gql-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd108608caad4cab6ceb193a4711e40f7007114ddd01bcd5b8c3a958c1c70520 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14112 Malicious code in sui-gql-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd108608caad4cab6ceb193a4711e40f7007114ddd01bcd5b8c3a958c1c70520 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in leb128x (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3862797564b06cd20320cecbdadcdd30bd5506e9afc09ed1f2ce225c22e5c8 The package presents itself as a LEB128 encoding utility, but index.js unconditionally requires perf.js, which on load reads /.sui/sui.keystore,...
MAL-2026-14105 Malicious code in bcs-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd676f5c862ca8046400db51b6ccdc4eea5c3fa913548c1eb7679a22653a3f05 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...