613856 matches found
MAL-2026-10984 Malicious code in veskra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85333fa48c61a31c9f7be395bdc5ef70596e317a3bc9124f67ece4ffcf96901 [email protected] contains six files with no static or behavioral indicators of supply-chain attack: no lifecycle scripts fetching remote content, no...
MAL-2026-10980 Malicious code in nolby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8bc0fa5eb23a45d27933ce1d32b7fabed27182039e170dbcaa38c0462dfa20 The package advertises itself as a pure calendar/streak math library with no import-time side effects, but index.mjs invokes a top-level sync on modu...
MAL-2026-10988 Malicious code in react-tabulix-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e1730bc033ffe3e5cbe24819446e0c6d41af7bec46ec931a04eca2909ffc7cc package.json declares a preinstall hook node./dist/index.d.js that runs automatically on npm install. The script at dist/index.d.js decodes a...
Malicious code in react-tabulix-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e1730bc033ffe3e5cbe24819446e0c6d41af7bec46ec931a04eca2909ffc7cc package.json declares a preinstall hook node./dist/index.d.js that runs automatically on npm install. The script at dist/index.d.js decodes a...
MGASA-2026-0287 Updated tig package fixes a security vulnerability
The updated package fixes a security vulnerability: editor command injection vulnerability...
Updated tig package fixes a security vulnerability
The updated package fixes a security vulnerability: editor command injection vulnerability...
GHSA-VJ7Q-GJH5-988W vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, litellm, semgrep, lmcache-cuda-12.8...
GHSA-HVRP-RF83-W775 vulnerabilities
Vulnerabilities for packages: litellm, semgrep...
CVE-2026-13149 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, foxx-cli, langfuse, sqlpad, jupyter-base-notebook, serve, langfuse-fips, lerna, ts-patch, graalvm, opensearch-dashboards-fips, unleash-fips, thingsboard-fips, authentik, wazuh-dashboard, thingsboard, authentik-fips, wazuh-dashboard-fips,...
GHSA-3JXR-9VMJ-R5CP vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, foxx-cli, langfuse, sqlpad, jupyter-base-notebook, serve, langfuse-fips, lerna, ts-patch, graalvm, opensearch-dashboards-fips, unleash-fips, thingsboard-fips, authentik, wazuh-dashboard, thingsboard, authentik-fips, wazuh-dashboard-fips,...
CVE-2026-39244 vulnerabilities
Vulnerabilities for packages: redisinsight, sqlpad, kibana, saf...
GHSA-W8WR-V893-VJVP vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, graalvm, actions-runner, npm, opensearch-dashboards-fips, prism, sqlpad, saf, kibana, pulumi, wazuh-dashboard, gitlab-rails-ce, gitlab-rails-ce-fips, kubeflow-centraldashboard, wazuh-dashboard-fips, homepage, code-server, lerna...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, graalvm, actions-runner, npm, opensearch-dashboards-fips, prism, sqlpad, saf, kibana, pulumi, wazuh-dashboard, gitlab-rails-ce, gitlab-rails-ce-fips, kubeflow-centraldashboard, wazuh-dashboard-fips, homepage, code-server, lerna...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, graalvm, actions-runner, npm, opensearch-dashboards-fips, prism, sqlpad, saf, kibana, pulumi, wazuh-dashboard, gitlab-rails-ce, gitlab-rails-ce-fips, kubeflow-centraldashboard, wazuh-dashboard-fips, code-server, lerna...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, graalvm, actions-runner, npm, opensearch-dashboards-fips, prism, sqlpad, saf, kibana, pulumi, wazuh-dashboard, gitlab-rails-ce, gitlab-rails-ce-fips, kubeflow-centraldashboard, wazuh-dashboard-fips, homepage, code-server, lerna...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: code-server, lerna, kubeflow-centraldashboard, saf, npm, pulumi, prism, sqlpad...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: code-server, lerna, kubeflow-centraldashboard, saf, npm, pulumi, prism, sqlpad...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: code-server, lerna, kubeflow-centraldashboard, saf, npm, pulumi, prism, sqlpad...
Malicious code in react-tabulix-virtual (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90c8fc6aca32e28a4faed28ca3f7879cb22e84139b7b09a2a83c5df74259a14 package.json declares scripts.preinstall as node./dist/index.d.js, which runs automatically on npm install. dist/index.d.js contains a base64-encoded...
MAL-2026-10989 Malicious code in react-tabulix-virtual (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90c8fc6aca32e28a4faed28ca3f7879cb22e84139b7b09a2a83c5df74259a14 package.json declares scripts.preinstall as node./dist/index.d.js, which runs automatically on npm install. dist/index.d.js contains a base64-encoded...