1502 matches found
Malicious code in ventrix-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b68f964850d0777c1f3993c52e3b66dc425b02ee82fb33bcd958514f730926 [email protected] ships a loader that, when the package's default getPlugin export is invoked, performs an HTTP request to the hardcoded endpoint...
MAL-2026-11706 Malicious code in @or-sdk/library (npm)
npm/@or-sdk/library is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by...
GHSA-8JC8-CVQJ-P926 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng-fips, gitlab-workhorse-ce-fips, gitlab-runner, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-cng, gitlab-workhorse-ce...
MAL-2026-10901 Malicious code in solana-web3-lts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51efd3d5cdcb8fb794a1702f586abd7018d86aad3e40286f5a43dd1127d804ed Package name 'solana-web3-lts' resembles the widely-used '@solana/web3.js' Solana SDK, raising name-confusion concerns for installers reaching for th...
RHSA-2026:37535 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
GHSA-28X5-J68M-FXR3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-2W8Q-JWXQ-9MRG vulnerabilities
Vulnerabilities for packages: chromium...
Malicious code in polymarket-kelly-stake-math (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9798cce0effcbcf5ed3295f322a375bb1a3cbb7e9db4b7d88c802bf5116639e3 [email protected] advertises itself as a pure Kelly-stake math helper but its postinstall hook scripts/install-check.cjs, invoked fro...
Malicious code in ts-eslint-jest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1ffed26d2d64bf9076210504de22b87e27a065821dedbc708fb05f7c47db74 The package [email protected] presents as a TypeScript/ESLint/Jest helper but ships lib/collect.js, which imports childprocess and invokes...
MAL-2026-7404 Malicious code in rngularjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7332 Malicious code in options-msg (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7305 Malicious code in jreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7094 Malicious code in @tc-core/member-service (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9985 Malicious code in zztestno44 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9965 Malicious code in zzpdfvar08 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9950 Malicious code in zzjinavcsbzr (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zwttestdoc (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zwtd102 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...