MAL-2026-16152 Malicious code in strapi-plugin-os-info-meeb322k (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26da05bb07f15b53c17000d82631f739bcbfed9c94b9b4174e1c3cb769049ce5 The package declares a postinstall script postinstall.js that runs automatically on npm install. The script collects host reconnaissance data —...

Malicious code in web-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61680a5d53758bc9eb99b1cd2566e6e19139d09fee10a0096a5e72bb0953a5b2 package.json declares preinstall: node index.js, causing index.js to execute automatically on npm install. The script collects os.hostname, os.userIn...

MAL-2026-4887 Malicious code in @cloudplatform-single-spa/anti-ddos (npm)

Part of a dependency confusion attack campaign targeting the @cloudplatform-single-spa and @mlspace npm scopes. The attacker npm user mr.4nd3r50n published 139 scoped packages at the inflated version 99.99.99, which resolves ahead of any private registry version via npm's default version...

keycloak: reflected XSS attack

A reflected cross-site scripting XSS vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious link to insert an arbitrary URI into a Keycloak error page. This flaw requires a user or administrator to interact with a link in order to be...

keycloak: reflected XSS attack

A reflected cross-site scripting XSS vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious link to insert an arbitrary URI into a Keycloak error page. This flaw requires a user or administrator to interact with a link in order to be...