ROOT-APP-NPM-CVE-2026-44575 CVE-2026-44575 in @rootio/next - Patched by Root

Root has patched CVE-2026-44575 in the @rootio/next package for Root:npm. Multiple fixed versions available...

Malicious code in parket-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e9b185a1b54e41a8fb900a67aab43dbb78abc4fea96e9ca05d356f6864e3bdd index.js imports childprocess and invokes execSync with bash and zsh shells index.js line 1, 301, 317. Without traced execution context it is not...

MAL-2026-6298 Malicious code in ttal2ttml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29387ac35a2248ad2e4b287b8c082f8d1a8d03b4937fc84a5b81fb85697e19d4 package.json declares a preinstall lifecycle script that runs node -e "tryrequire'childprocess'.execSync'curl -sf...

Malicious code in new-ecro-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0826d146dbc513ac14f403eaa9ba65dffbd04da52c55ff1840ad153dab96e87 The package publishes verbatim big.js v7.0.1 source including the upstream copyright header, README, repository URL pointing to MikeMcl/big.js, and t...

Malicious code in poly-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5aab464aac47233efb564c52d5818fef783efa856f8318c61d61ef99ca0da4e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-6733 vulnerabilities

Vulnerabilities for packages: gemini-cli, kibana, node-gyp, code-server, haraka, npm, saf, py3-captum, vitess, renovate, actions-runner, pelias-api, prism...

CVE-2026-9679 vulnerabilities

Vulnerabilities for packages: gemini-cli, kibana, node-gyp, code-server, haraka, npm, saf, py3-captum, vitess, renovate, actions-runner, pelias-api, prism...

CVE-2026-11525 vulnerabilities

Vulnerabilities for packages: gemini-cli, kibana, node-gyp, code-server, haraka, npm, saf, py3-captum, vitess, renovate, actions-runner, pelias-api, prism...

CVE-2026-12151 vulnerabilities

Vulnerabilities for packages: gemini-cli, kibana, node-gyp, code-server, haraka, npm, saf, py3-captum, vitess, renovate, actions-runner, pelias-api, prism...

GHSA-P88M-4JFJ-68FV vulnerabilities

Vulnerabilities for packages: gemini-cli, kibana, node-gyp, code-server, haraka, npm, saf, py3-captum, vitess, renovate, actions-runner, pelias-api, prism...

GHSA-G8M3-5G58-FQ7M vulnerabilities

Vulnerabilities for packages: gemini-cli, kibana, node-gyp, code-server, haraka, npm, saf, py3-captum, vitess, renovate, actions-runner, pelias-api, prism...

GHSA-35P6-XMWP-9G52 vulnerabilities

Vulnerabilities for packages: gemini-cli, kibana, node-gyp, code-server, haraka, npm, saf, py3-captum, vitess, renovate, actions-runner, pelias-api, prism...

GHSA-P88M-4JFJ-68FV vulnerabilities

Vulnerabilities for packages: vitess, node-gyp, saf, prism, renovate, npm, code-server...

GHSA-G8M3-5G58-FQ7M vulnerabilities

Vulnerabilities for packages: vitess, node-gyp, saf, prism, renovate, npm, code-server...

CVE-2026-9679 vulnerabilities

Vulnerabilities for packages: vitess, node-gyp, saf, prism, renovate, npm, code-server...

GHSA-VXPW-J846-P89Q vulnerabilities

Vulnerabilities for packages: vitess, node-gyp, saf, prism, renovate, npm, code-server...

CVE-2026-6733 vulnerabilities

Vulnerabilities for packages: vitess, node-gyp, saf, prism, renovate, npm, code-server...

CVE-2026-12151 vulnerabilities

Vulnerabilities for packages: vitess, node-gyp, saf, prism, renovate, npm, code-server...

CVE-2026-11525 vulnerabilities

Vulnerabilities for packages: vitess, node-gyp, saf, prism, renovate, npm, code-server...

ROOT-APP-NPM-CVE-2025-54798 CVE-2025-54798 in @rootio/tmp - Patched by Root

Root has patched CVE-2025-54798 in the @rootio/tmp package for Root:npm. Multiple fixed versions available...