Malicious code in vishal_312pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d38dada8ec3921b4a3f69e7d44b5f5b54d345ff8f9581d34007a3e68679da4 package.json declares a preinstall lifecycle script that runs on npm install and issues a wget request to...

CVE-2026-86253

h3 npm package versions = 2.0.1-rc.14 contain a path traversal vulnerability in serveStatic. On Node.js deployments, event.url.pathname is not normalized, so percent-encoded dot segments %2e%2e are passed to decodeURI and decoded to ../ sequences without sanitization. An unauthenticated remote...

CVE-2026-86253 h3 before 1.15.6 Path Traversal via Percent-Encoded Dot Segments

h3 npm package versions = 2.0.1-rc.14 contain a path traversal vulnerability in serveStatic. On Node.js deployments, event.url.pathname is not normalized, so percent-encoded dot segments %2e%2e are passed to decodeURI and decoded to ../ sequences without sanitization. An unauthenticated remote...

EUVD-2026-72109

h3 npm package versions = 2.0.1-rc.14 contain a path traversal vulnerability in serveStatic. On Node.js deployments, event.url.pathname is not normalized, so percent-encoded dot segments %2e%2e are passed to decodeURI and decoded to ../ sequences without sanitization. An unauthenticated remote...

Malicious code in minecraftmodes (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2057275d7d6bc39e22d9147702d20b43fcabcab4e438821e823010937448eb6c The package exfiltrates Roblox cookies from the victim machine. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaig...

MAL-2026-15937 Malicious code in minecraftmodes (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2057275d7d6bc39e22d9147702d20b43fcabcab4e438821e823010937448eb6c The package exfiltrates Roblox cookies from the victim machine. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaig...

CVE-2026-86090

creationtimestamp| type| source ---|---|--- 2026-09-06 06:11:54+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mutdkg5dke2l 2026-09-06 07:07:56+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mutgolfbcq2x 2026-09-10 03:30:04+00:00| seen|...

Malicious code in @liuliang520500/sinataoke_cn_test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3049eff160660fee9030ad57663083c1171a4e69c84b4f234660420d124c5c82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15960 Malicious code in @liuliang520500/sinataoke_cn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e3ff1d04feca3fcec866427a6d90307e3391fde1e732c8f600a06e86900af5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @liuliang520500/sinataoke_cn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e3ff1d04feca3fcec866427a6d90307e3391fde1e732c8f600a06e86900af5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15961 Malicious code in @liuliang520500/sinataoke_cn_test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3049eff160660fee9030ad57663083c1171a4e69c84b4f234660420d124c5c82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15958 Malicious code in @liuliang520500/pdd-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 414eaea31757ec4c7282573b38caddd11b7fd60be46bdebede8224cfa09f8110 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @liuliang520500/jd-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b68e3cfe0548d1118ec047bea15f3bb902fcb9db0816251df440e2e2326a5382 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @liuliang520500/pdd-sdk-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a7499d71351fb91827b6e69cbea52e9a4cd6b3802693d0b4f1b545700e8ad8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15957 Malicious code in @liuliang520500/jd-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b68e3cfe0548d1118ec047bea15f3bb902fcb9db0816251df440e2e2326a5382 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @liuliang520500/pdd-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 414eaea31757ec4c7282573b38caddd11b7fd60be46bdebede8224cfa09f8110 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @liuliang520500/taobao-topclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fce1760178d3d6c27bfbeac47e726c22a17252d491a2988939082c1ead4a4ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15962 Malicious code in @liuliang520500/taobao-topclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fce1760178d3d6c27bfbeac47e726c22a17252d491a2988939082c1ead4a4ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pilllesss/yorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a485401c140a31985b0a8f93787f167ad44cdccd111240304c858410bc0aceb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 1cattunnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b08759ff9575f7cea8ef2e713458337d90c27b83a76df2e43d9b9a0af2e48d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...