Malicious code in telegram-helper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90afeb1d39f1ef3d107f2da6a26c4af8c7efb314bb0f272d45fa755119e1b669 telegramhelper describes itself as "A minimal example Python library" and ships a Russian-language template README the Homepage field is still the...

CLSA-2026-1788814705 TuxCare security update for org.springframework (8 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 8 CVEs. Fixed in 5.3.25-tuxcare.9...

CLSA-2026-1788814439 TuxCare security update for 4 packages (1 CVE)

TuxCare rebuilt 4 packages to address 1 CVE. Fixed in 3.2.11-tuxcare.4...

CLSA-2026-1788807216 TuxCare security update for org.springframework (11 CVEs)

TuxCare rebuilt 22 org.springframework packages to address 11 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.5...

Malicious code in @cp-shared-14/frontend-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f9a0b8746f6c279b21cfa1c66d1ec6ceaff3a528152347aa7b2c5458952fe691 The OpenSSF Package Analysis project identified '@cp-shared-14/frontend-ui' @ 6.3.4 npm as malicious. It is considered malicious because: - The...

MAL-2026-16015 Malicious code in @cp-shared-14/frontend-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f9a0b8746f6c279b21cfa1c66d1ec6ceaff3a528152347aa7b2c5458952fe691 The OpenSSF Package Analysis project identified '@cp-shared-14/frontend-ui' @ 6.3.4 npm as malicious. It is considered malicious because: - The...

CLSA-2026-1788804966 TuxCare security update for org.springframework.security (2 CVEs)

TuxCare rebuilt 18 org.springframework.security packages to address 2 CVEs. Fixed in 6.0.8-tuxcare.3...

CLSA-2026-1788802441 TuxCare security update for org.springframework (7 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 7 CVEs. Fixed in 5.3.30-tuxcare.10...

CLSA-2026-1788800921 TuxCare security update for org.springframework (7 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 7 CVEs. Fixed in 5.3.29-tuxcare.10...

Malicious code in @aircanada/navigation-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78d6c89dae0e934ca5564921316f878b55ca1e3fb9bdfebbc8a04e07708de03c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @aircanada/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 356e229b0e7aa4523c4bd61f176ee40d5e20a3d897bac1821057ffefc969ec12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @aircanada/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a5af6f9411d25b2d87c0c4f50130fa9eccd9d4348195663b38d4c9c9edef6f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16019 Malicious code in @aircanada/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a5af6f9411d25b2d87c0c4f50130fa9eccd9d4348195663b38d4c9c9edef6f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16018 Malicious code in @aircanada/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 356e229b0e7aa4523c4bd61f176ee40d5e20a3d897bac1821057ffefc969ec12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview log-update-ts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview glia-functions-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview op-ts-server-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview dbt-language-server is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview github-app-sts-action is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @aircanada/components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...