MAL-2026-14935 Malicious code in 3layerdipstackttd2o (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05f539ccc6a611c927ad4d2c56f34a3e008ea454c812f4e10352f6cd850fab7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14598 Malicious code in 3layerdipstack1a4xg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5757d0297f898182175bc3d1a4ce7dc9d0161b4e24031c3442f25e565b6dfebb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14669 Malicious code in 3layerdipstack8zg7y (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d67b18e31be3701ce965612c851f62d385f0f0d5c6326464fb76cea70d6875e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14944 Malicious code in 3layerdipstackuew4bh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f693f3775d167495f7080e39f299df6fb4cc1e282f79718d712fcca91076e82 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15197 Malicious code in desmos-graphing-3sp71tdg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d246b8871e487d793e8a7837c78bb17b343b500110923a68fb1aacc2433c58a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15240 Malicious code in desmos-graphing-qqmn0bic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25dfc32d9cad7a01f319ea29b7fe21953ca24ed3a4680e211f5f411c0431130b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15254 Malicious code in desmos-graphing-y1aqhk2u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27491976b2ff276299d5598a5eefe3f725a5683d23821ea6a088e53fad425663 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in waxed-slightly-weathered-cut-copper-stairs-rsq09wdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcad758e91e7fc846d0fb842f490c66da75b8a99c4f4867ce6024ccffdf987f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15074 Malicious code in classlink-fp7poyii (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe762ef1011dea9f34d900f617d2e8badc973b6128b6b6e3cf6dcc69948dcdc3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15150 Malicious code in classlink-u1vqpl5z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9599710c848a74113f06cd897bee6caed418286f4cab58e3b3c5772782d3a7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15144 Malicious code in classlink-t347plks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 793ed145bb1a30cb8b2d3ff5aa95e35519199632465ce30096e163db35ec8594 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-hxytxlf0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e29c169286c2e9f12e3c5acdd62acd7c5937400e8b57988fd953c213119b941 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-rkt8e6l7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98b288624e813a5b3692a59c632af15afff1ac6ef343f446ee64222795d24940 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15434 Malicious code in secure-test-browser-ude9srx4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4160d2b21a64b999a264511a0f6a9329aaf809e2902a15e912cddb9e3a962f85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15276 Malicious code in secure-test-browser-2r4fku8u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63f49c73a20295da0a62ce73165621f7fd843144ab59df6089a0cfbb5e6e9f13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15374 Malicious code in secure-test-browser-kdfmv2fs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c1add7e4f8e55604023c9516853bf5abdcaa456e3f71c24188ef104ded9d606 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15183 Malicious code in classlink-yo9y3rsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f57b285c68a12fe4c8abd89d685c5b26f4fc933e56d8e4a0c643ec7969110ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-54550

IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack in izpack-installer/src/main/java/com/izforge/izpack/installer/unpacker/UnpackerBase.java obtains an attacker-controlled PackFile targetPath, passes...

CVE-2026-54550: Improper Limitation of a Pathname to a Restricted Directory

IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack in izpack-installer/src/main/java/com/izforge/izpack/installer/unpacker/UnpackerBase.java obtains an attacker-controlled PackFile targetPath, passes...

Linux Distros Unpatched Vulnerability : CVE-2026-78935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outsid...