689 matches found
@0xgraph/cli (>=0.0.1 <=0.2.1), @actra-development-oss/redux-persistable (>=2.0.0 <=3.0.0) +652 more potentially affected by CVE-2026-29063 via immutable (>=4.0.0-rc.1 <=4.3.7)
immutable NPM version =4.0.0-rc.1, =0.0.1, =2.0.0, =0.2.1, =0.1.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.0.1, =0.11.8-rc.0, =0.1.0, =0.3.3 - @alfresco/adf-testing =6.0.0-A.2-8258 - @alys-chain/graph-alys-cli =0.88.0 and more Source cves: CVE-2026-29063 Source advisory: SNYK:JS-IMMUTABLE-15423650...
02url-querystring-http (>=1.0.1 <=1.0.4), 1-0-5-hai-aage-dekhte-hein-kya-aat-hai (>=1.0.5 <=1.0.6) +12772 more potentially affected by CVE-2026-2359 via multer (>=0.0.5 <=2.0.2)
multer NPM version =0.0.5, =1.0.1, =1.0.5, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.3 - 6e-alpha-backend-admin =1.0.0 and more Source cves: CVE-2026-2359 Source advisory: OSV:GHSA-V52C-386H-88MC...
Malicious Package
Overview sokettry is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
3dshex (>=0.1.0 <=0.5.3), 91jin (>=0.1.4 <=0.1.8) +1881 more potentially affected by CVE-2026-27959 via koa (>=0.0.1 <=2.16.3)
koa NPM version =0.0.1, =0.1.0, =0.1.4, =1.0.0, =1.0.0, =0.1.0, =3.10.1, =3.7.0, =4.25.19-patch.1, =0.0.1, =0.3.1, =0.0.1, =0.0.94 and more Source cves: CVE-2026-27959 Source advisory: OSV:GHSA-7GCC-R8M5-44QM...
Malicious code in vite-ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dde7d42b0bc5236d827ba62c883fbf14b643e368ef8a4b0f7b5430a35183254 The package vite-ui-components was found to contain malicious code. Source: ghsa-malware...
@vltpkg/cli-sdk (>=0.0.0-7 <=1.0.0-rc.1), @vltpkg/config (>=0.0.0-19 <=1.0.0-rc.1) +9 more potentially affected by CVE-2026-24909 via @vltpkg/tar (>=0.0.0-0.1730239248325 <=1.0.0-rc.1)
@vltpkg/tar NPM version =0.0.0-0.1730239248325, =0.0.0-7, =0.0.0-19, =0.0.0-0.1730239248325, =0.0.0-7, =0.0.0-0.1730239248325, =0.0.0-0.1730239248325, =0.0.0-4, =0.0.0-7, =0.0.0-10, =0.0.0-26, =0.0.1, =1.2.0 Source cves: CVE-2026-24909 Source advisory: OSV:GHSA-GF2C-JWCJ-X929...
2jcie-ble-decode (>=0.0.1 <=0.1.0), @agc93/pak-reader (>=0.0.1 <=0.0.3) +161 more potentially affected by CVE-2026-1245 via binary-parser (>=1.1.5 <=2.2.1)
binary-parser NPM version =1.1.5, =0.0.1, =0.0.1, =0.38.0, =0.38.0, =0.38.0, =0.30.0-beta.1, =0.38.0, =0.38.0, =0.38.0, =0.0.1, =1.0.0, =0.4.41, =0.5.2 - @emergencyx/e4p =1.1.1 - @eschoellhorn/deadlights =0.6.0 and more Source cves: CVE-2026-1245 Source advisory: OSV:GHSA-M39P-34QH-RH3W...
EUVD-2026-3278
Malicious code in @daffadeveloper/signal-node npm...
EUVD-2026-3069
Malicious code in js-observability npm...
CVE-2021-3714 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu-melange, linux-qemu...
GHSA-W2V4-MPJ8-9X8M vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu-melange, linux-qemu...
EUVD-2026-0020
Malicious code in rules-playground npm...
Malicious code in @vietmoney/react-native-image-transformer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d6e41bb857d4ed96776b54551e25a97efccd98d763659d945f9c969c7981cf The package @vietmoney/react-native-image-transformer was found to contain malicious code. Source: ghsa-malware...
01os (=0.0.14), 3-04-2025-ttm (=0.1.0) +11444 more potentially affected by CVE-2025-14929 via transformers (>=2.10.0 <=5.9.0)
transformers PYPI version =2.10.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =0.10.11, =0.5.5, =0.0.4.80, =4.0.2 - aait-store-cut-part-001 =0.0.1 and more Source cves: CVE-2025-14929 Source advisory: SNYK:PYTHON-TRANSFORMERS-14564275...
Malicious code in oneday-worm-research (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5cc173214371a2dfaa01a87455b2deadd72f9169e423a8d14da6553747fdbdc The package oneday-worm-research was found to contain malicious code...
Malicious code in elf-stats-cheery-northstar-345 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11afb900180826fdc5929d1c3095198004109bd2107d02b1b6cd36c676b8aafd The package elf-stats-cheery-northstar-345 was found to contain malicious code...
MAL-2025-192115 Malicious code in elf-stats-piney-fireplace-695 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75372c370afc1b936f0c2a9179148d8cee04feea12a90a745148c087a166403 The package elf-stats-piney-fireplace-695 was found to contain malicious code...
Malicious code in elf-stats-mulled-rocket-415 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fbaef591bfadf2aa73f14a0aeb817e0a9576d0c8b4da52ee97b7a87ce724c03 The package elf-stats-mulled-rocket-415 was found to contain malicious code...
acryl-datahub-gx-plugin (>=0.14.0.3 <=0.15.0rc15), agnostic (=1.0.3) +550 more potentially affected by CVE-2024-4340 via sqlparse (>=0.1.14 <=0.5.3)
sqlparse PYPI version =0.1.14, =0.14.0.3, =0.2.0, =0.0.1, =0.1.0, =2.0.0, =0.8.0, =0.0.1a0, =0.0.36, =2.1.1.3, =1.0.0, =1.0.2 and more Source cves: CVE-2024-4340 Source advisory: SNYK:PYTHON-SQLPARSE-14157217...