@designid/tokens (0.1.1), @directus/vue-split-panel (>=0.1.0, <=0.8.2) +10 more potentially affected by CVE-2026-23888 via pnpm (>=10.0.0, <=10.18.3)

pnpm NPM version =10.0.0, =0.1.0, =1.1.1, =3.7.16, =0.1.8, =0.1.0, =2.7.2, =0.2.5, =1.0.4, =1.0.7 Source cves: CVE-2026-23888 Source advisory: OSV:GHSA-6PFH-P556-V868...

Malicious Package

Overview rank4222wun is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

MAL-2026-508 Malicious code in cartos-dds-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f496b09128d69f16784f2b9c7ac2d7f29982e802db47de225654f902cd2db4 The package cartos-dds-ui was found to contain malicious code. Source: ossf-package-analysis...

CVE-2026-0775

npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of npm cli. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...

pnpm code issues and vulnerabilities

PNPM is a package manager developed by the open-source project Pnpm. Versions of Pnpm prior to 10.28.1 had code-related vulnerabilities. These vulnerabilities stemmed from path traversal vulnerabilities in the binary extractor, which could allow malicious packages to write files outside of the...

MAL-2026-511 Malicious code in ostk-otel-autoconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b222e0d41ae144cf784f7fd2c40bd0c9bcb213c76581f4f9285f6f5d3baf36a The package ostk-otel-autoconfig was found to contain malicious code. Source: ghsa-malware...

MAL-2026-513 Malicious code in overstock-component-library-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3047a2aa0008e3dd53a44ed19238f41540af1763edd48a5db147506a32e6bf77 The package overstock-component-library-v3 was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-4650

Malicious code in zabittest11 npm...

Malicious code in overstock-jenkins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8c5441a7b9b1ad7193650b05275dc85626691e1fa1f04bb0f21783fa75673c The package overstock-jenkins was found to contain malicious code. Source: ghsa-malware...

MAL-2026-514 Malicious code in overstock-health-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88927f419aeeb8999fb1b8be70403f14230ba9189e1bde2179b717f55c8c3217 The package overstock-health-express was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-4518

Malicious code in eits npm...

EUVD-2026-4517

Malicious code in h-jsencrypt npm...

MAL-2026-494 Malicious code in eits (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec23b0de809cd836bbc3b47232454674773608dd4429cb3ecd6a45fb5d9c2ee The package eits was found to contain malicious code. Source: ghsa-malware c01b198ab80fdc36e1397f6938db086271de12c3a19de4744858614f97742a6a Any...

MAL-2026-497 Malicious code in test-on-other (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaeca000a0d70bc52934cc2047e1924aa1f63f790734f0063a190476e7accdf2 The package test-on-other was found to contain malicious code...

Malicious code in hemi-btc-staking-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19073a10f9ea03f132e59a88b1c0a694120c696aa0be4824281160c7bfffb56 The package hemi-btc-staking-actions was found to contain malicious code. Source: ghsa-malware...

Malicious code in eits (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec23b0de809cd836bbc3b47232454674773608dd4429cb3ecd6a45fb5d9c2ee The package eits was found to contain malicious code. Source: ghsa-malware c01b198ab80fdc36e1397f6938db086271de12c3a19de4744858614f97742a6a Any...

MAL-2026-496 Malicious code in hemi-btc-staking-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19073a10f9ea03f132e59a88b1c0a694120c696aa0be4824281160c7bfffb56 The package hemi-btc-staking-actions was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-4508

Malicious code in oxnoxon npm...

EUVD-2026-4509

Malicious code in test-on-other-again npm...

Malicious code in test-on-other-again (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c2b4e18e26bfe221e4ebcdaa18a271ea746bee1977c35172726fd753a923897 The package test-on-other-again was found to contain malicious code. Source: ossf-package-analysis...