1502 matches found
Malicious code in env-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9fdb2ca296901d2020b959a63ec369c661ac063698529ced5230cd04717a5c0 The package env-nodejs was found to contain malicious code...
Malicious code in ecto-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a678fddfc2d44cf68ad36ea2ec4225f695540faeefd1e528f65887f3f32555ef The package ecto-engine was found to contain malicious code...
Malicious code in yahoo-commerce (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3725b1c28bf27cb9ae988e61fc0c7b790b588587cef59086e7d63460f2241a9 The package yahoo-commerce was found to contain malicious code...
MAL-2026-1780 Malicious code in libxmljs2qaz (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f64f090b82381f264f574df9a6c965210764f25bcc6e57a1a0811cbca70fc20 The package libxmljs2qaz was found to contain malicious code...
MAL-2026-1648 Malicious code in advertising-events (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e784ce1a0573b476f4232dcdc6136efaa217d3483765875dbea0aae015542d The package advertising-events was found to contain malicious code...
cy-ai-trainer (>=0.0.1 <=0.0.2), llama-index-packs-vanna (>=0.0.1 <=0.3.0) +2 more potentially affected by CVE-2026-4229 via vanna (>=0.0.30 <=2.0.2)
vanna PYPI version =0.0.30, =0.0.1, =0.0.1, =1.0.0, =2.0.0 Source cves: CVE-2026-4229 Source advisory: SNYK:PYTHON-VANNA-15674521...
MAL-2026-1252 Malicious code in pear-apps-utils-avatar-initials (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 097265e259265c0fcc8e4d53ebb4bfcdc33404ce2fc818308f0f1097d90de3d4 The package pear-apps-utils-avatar-initials was found to contain malicious code. Source: ghsa-malware...
10up-toolkit (>=6.0.0 <=6.5.0-next.1), @0ti.me/ts-test-deps (=0.2.0) +6495 more potentially affected by CVE-2026-27904 via minimatch (>=9.0.0 <=9.0.6)
minimatch NPM version =9.0.0, =6.0.0, =1.1.0-pre.1, =1.4.0, =9.1.0, =1.17.3-testing-284.48.0, =1.0.0, =1.1.6, =0.0.0-alpha.1aa37fb04f1f, =1.1.3, =1.0.6, =1.0.25 and more Source cves: CVE-2026-27904 Source advisory: SNYK:JS-MINIMATCH-15353387...
GHSA-C37X-P7MP-HH29 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-JGFQ-MGXG-4QWM vulnerabilities
Vulnerabilities for packages: grafana...
Slackware: Security Advisory (SSA:2026-055-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
10up-toolkit (>=6.0.0 <=6.5.0-next.1), @0ti.me/ts-test-deps (=0.2.0) +6494 more potentially affected by CVE-2026-26996 via minimatch (>=9.0.0 <=9.0.5)
minimatch NPM version =9.0.0, =6.0.0, =1.1.0-pre.1, =1.4.0, =9.1.0, =1.17.3-testing-284.48.0, =1.0.0, =1.1.6, =0.0.0-alpha.1aa37fb04f1f, =1.1.3, =1.0.6, =1.0.25 and more Source cves: CVE-2026-26996 Source advisory: OSV:GHSA-3PPC-4F35-3M26...
Malicious code in cowsay-allcaps (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de832c3418f9a9b6e1645552b57338a05e07f2a479fd99f0aca66e931ebadac The package cowsay-allcaps was found to contain malicious code...
MAL-2026-638 Malicious code in solhint-plugin-hyperlane (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1aa9de63bf20821ba2b8081862d56bf4238d4d5138cdfae10fa1d260ee9b57 The package solhint-plugin-hyperlane was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview @maps-bc/i18n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
GHSA-5RFX-CP42-P624 vulnerabilities
Vulnerabilities for packages: keycloak...
Malicious Package
Overview testing-package-bose is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2026-3074
Malicious code in eniram-web-common-ui npm...
MAL-2026-285 Malicious code in focus-trap-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f9667b65219caefb7d526b0ab3787b23c76689e9858e281ce10c5a744ffd10 The package focus-trap-v2 was found to contain malicious code. Source: ghsa-malware e80cecdd51ca03a6a75b249c73d4a4efda03c84e9bdc4a1ba3b2b66cbfd8c82d...