@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +14 more potentially affected by CVE-2026-114121 via electron (>=42.0.0, <=42.11.1)

electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.0.0-alpha.1, =0.10.0, =0.5.0, =0.1.4, =0.1.2, =0.1.1, =0.3.75, =0.4.2 - sunrize 2.1.5 and more Source cves: CVE-2026-114121 Source advisory: OSV:GHSA-997Q-GVVC-JWMX...

@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +14 more potentially affected by CVE-2026-113800 via electron (>=42.0.0, <=42.11.1)

electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.0.0-alpha.1, =0.10.0, =0.5.0, =0.1.4, =0.1.2, =0.1.1, =0.3.75, =0.4.2 - sunrize 2.1.5 and more Source cves: CVE-2026-113800 Source advisory: SNYK:JS-ELECTRON-21431563...

@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +12 more potentially affected by CVE-2026-102673 via electron (>=42.0.0, <=42.4.1)

electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.0.0-alpha.1, =0.10.0, =0.1.4, =0.1.2, =0.1.1, =0.1.20 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102673 Source advisory: SNYK:JS-ELECTRON-20335498...

@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +12 more potentially affected by CVE-2026-102673 via electron (>=42.0.0, <=42.4.1)

electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.0.0-alpha.1, =0.10.0, =0.1.4, =0.1.2, =0.1.1, =0.1.20 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102673 Source advisory: OSV:GHSA-HQ2X-R82H-9WJ4...

@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +13 more potentially affected by CVE-2026-102676 via electron (>=42.0.0, <=42.7.1)

electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.0.0-alpha.1, =0.10.0, =0.1.4, =0.1.2, =0.1.1, =0.3.75, =0.3.91 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102676 Source advisory: GHSA-9QH4-3JW8-366W...

@happy-nut/monacori (>=0.1.28, <=0.1.34), @hayasaka7/haya-pet (>=0.1.0, <=0.3.28) +5 more potentially affected by CVE-2026-102677 via electron (>=42.3.3, <=42.9.3)

electron NPM version =42.3.3, =0.1.28, =0.1.0, =0.5.0, =0.1.4, =0.3.75, =0.3.91 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102677 Source advisory: OSV:GHSA-QMV3-FV6V-RMHQ...

@happy-nut/monacori (>=0.1.28, <=0.1.34), @hayasaka7/haya-pet (>=0.1.0, <=0.3.28) +5 more potentially affected by CVE-2026-102677 via electron (>=42.3.3, <=42.9.3)

electron NPM version =42.3.3, =0.1.28, =0.1.0, =0.5.0, =0.1.4, =0.3.75, =0.3.91 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102677 Source advisory: GHSA-QMV3-FV6V-RMHQ...

Linux Distros Unpatched Vulnerability : CVE-2026-54161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - nut - None Ubuntu Linux - upsmon: remote OS command injection RCE via attacker- controlled ups.alarm in NOTIFYCMD execution CVE-2026-54161 Note...

CVE-2026-54161

Remote OS command injection in Network UPS Tools NUT upsmon. An attacker who can control a UPS's ups.alarm value malicious/compromised UPS or MITM of the driver-to-upsd channel gets that value substituted into the NOTIFYCMD handler, which upsmon passes to system, allowing arbitrary command...

CVE-2025-65548

NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell cashubtc/nuts before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored by the mint and attacker can exploit this vulnerability to fill the mint's db nd disk with arbitrary da...

CVE-2025-65548

NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell cashubtc/nuts before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored by the mint and attacker can exploit this vulnerability to fill the mint's db nd disk with arbitrary da...

CVE-2025-65548

NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell cashubtc/nuts before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored by the mint and attacker can exploit this vulnerability to fill the mint's db nd disk with arbitrary da...

EUVD-2025-136339

Malicious code in sgoodaini-sanuga-nut npm...

EUVD-2025-140115

Malicious code in miusafasdaan-nut-afnaearaaf npm...

EUVD-2025-140108

Malicious code in miusafasdagan-nut-afnaearaaf npm...

EUVD-2025-140105

Malicious code in miusafasdan-nut-afnaearaaf npm...

Malicious code in maalasha-nut-posis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 438aba14c6fe2660a57161f64081ceee8f2e5f0749136edc537691c9b7a79d7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad-nut-beligoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fb809b4793aa087e08c279bca8aca8e098b35265912ec35a96525daeaea7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madr-nut-beligoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b06e0a8f4ab314bb9e746545d27667c4cd16e8f114770f608c9c36487b1c7e27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madri-nut-beligoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbe6bdbc961876685f05176c53466df1eb16ec1c332dd7653d3d9e6bbdeb628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...