PT-2026-54636

Name of the Vulnerable Software and Affected Versions aws-cdk-lib versions prior to 2.260.0 Description OS command injection exists in the NodejsFunction Docker bundling pipeline within the OsCommand helper. An actor who can control dependency version strings in a project's package.json file may...

MAL-2025-135125 Malicious code in large_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1bbf51f298231489bede6b09e24eadcc5adbab5f67afc1789b00a3a5dbb1b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...