MAL-2026-6287 Malicious code in poly-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5aab464aac47233efb564c52d5818fef783efa856f8318c61d61ef99ca0da4e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-12151 vulnerabilities

Vulnerabilities for packages: vitess, node-gyp, haraka, kibana, gemini-cli, prism, actions-runner, renovate, npm, pelias-api, saf, code-server, py3-captum...

CVE-2026-11525 vulnerabilities

Vulnerabilities for packages: vitess, node-gyp, haraka, kibana, gemini-cli, prism, actions-runner, renovate, npm, pelias-api, saf, code-server, py3-captum...

GHSA-35P6-XMWP-9G52 vulnerabilities

Vulnerabilities for packages: vitess, node-gyp, haraka, kibana, gemini-cli, prism, actions-runner, renovate, npm, pelias-api, saf, code-server, py3-captum...

CVE-2026-6733 vulnerabilities

Vulnerabilities for packages: vitess, node-gyp, haraka, kibana, gemini-cli, prism, actions-runner, renovate, npm, pelias-api, saf, code-server, py3-captum...

CVE-2026-9679 vulnerabilities

Vulnerabilities for packages: vitess, node-gyp, haraka, kibana, gemini-cli, prism, actions-runner, renovate, npm, pelias-api, saf, code-server, py3-captum...

GHSA-G8M3-5G58-FQ7M vulnerabilities

Vulnerabilities for packages: vitess, node-gyp, haraka, kibana, gemini-cli, prism, actions-runner, renovate, npm, pelias-api, saf, code-server, py3-captum...

GHSA-P88M-4JFJ-68FV vulnerabilities

Vulnerabilities for packages: vitess, node-gyp, haraka, kibana, gemini-cli, prism, actions-runner, renovate, npm, pelias-api, saf, code-server, py3-captum...

CVE-2026-12151 vulnerabilities

Vulnerabilities for packages: renovate, code-server, vitess, npm, prism, node-gyp, saf...

CVE-2026-6733 vulnerabilities

Vulnerabilities for packages: renovate, code-server, vitess, npm, prism, node-gyp, saf...

GHSA-G8M3-5G58-FQ7M vulnerabilities

Vulnerabilities for packages: renovate, code-server, vitess, npm, prism, node-gyp, saf...

GHSA-P88M-4JFJ-68FV vulnerabilities

Vulnerabilities for packages: renovate, code-server, vitess, npm, prism, node-gyp, saf...

CVE-2026-9679 vulnerabilities

Vulnerabilities for packages: renovate, code-server, vitess, npm, prism, node-gyp, saf...

GHSA-VXPW-J846-P89Q vulnerabilities

Vulnerabilities for packages: renovate, code-server, vitess, npm, prism, node-gyp, saf...

CVE-2026-11525 vulnerabilities

Vulnerabilities for packages: renovate, code-server, vitess, npm, prism, node-gyp, saf...

ROOT-APP-NPM-CVE-2025-54798 CVE-2025-54798 in @rootio/tmp - Patched by Root

Root has patched CVE-2025-54798 in the @rootio/tmp package for Root:npm. Multiple fixed versions available...

RHSA-2026:27732 Red Hat Security Advisory: yggdrasil-worker-package-manager security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: yggdrasil-worker-package-manager security update

An update for yggdrasil-worker-package-manager is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 10 : yggdrasil-worker-package-manager (RHSA-2026:27732)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:27732 advisory. yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and...

MAL-2026-6249 Malicious code in blinkit-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca70b0a6be36daf245deb50dd6b3595a9bfba29c62770e82365152a02832cf8 On npm install, the package's preinstall lifecycle hook runs curl against http://d8s0b82plbq3u5sb2vo0sb3a9obr4yjt7.oast.site/ and POSTs the installer...