@grafana/flamegraph (>=13.0.2, <=13.1.0-27994349655), @grafana/o11y-ds-frontend (>=13.0.2, <=13.1.0-27994349655) +1 more potentially affected by CVE-2026-17033 via @grafana/ui (>=13.0.2, <=13.1.0-27994349655)

@grafana/ui NPM version =13.0.2, =13.0.2, =13.0.2, =13.0.2, =13.1.0-27994349655 Source cves: CVE-2026-17033 Source advisory: MEND:CVE-2026-17033...

Malware in o11y-ds-frontend

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in o11y-ds-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fca3e674d984eeb8be380f95b3033584360c55efdc438f8f43c521b0d7239f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5009 Malicious code in o11y-ds-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fca3e674d984eeb8be380f95b3033584360c55efdc438f8f43c521b0d7239f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...