MAL-2026-12818 Malicious code in beaver-ui-multi-select-with-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb4bab7b1c75e94cd3411aa312a1313e3d5a84bed77943b10f8c969b751cb23 On require of the package's main entry, index.js loads loader.js which selects a per-platform URL, downloads an opaque native binary from one of thre...

MAL-2026-12209 Malicious code in statist-browser-typed-client-ddp.mentat.ui.web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc78a545236395c12156cd5f8e36337df53024afd0a6a6da75f81fb9b7c11e7 The package's main entry index.js loads polyfill.js, which on module load detects OS and architecture, fetches a per-platform binary over HTTPS from...

MAL-2026-12046 Malicious code in statist-browser-typed-client-test.jumpwork.circuitbreaker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d969f292b82b34df445017d86910903f577428c88bd312736ef2c03f9381e4f On require of the package's main entry, compat.js runs as a side effect: it selects a per-platform payload, fetches a native binary over HTTPS from o...

MAL-2026-11138 Malicious code in json-schema-inspector (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023b104d04c30fccd05f5db5842a2d8735c572eb13cfbb5ca7ba763eeb525429 The package advertises itself as a JSON/XML schema validator, but both public entry points validateJson, validateXml in lib/core.js invoke a trigger...

MAL-2026-10517 Malicious code in @tqm-mfe/main (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba70610a96625984d6a26c5cfba828a98fad70a559f34eb881289f9ce4f625a1 scripts/postinstall.js is a heavily obfuscated obfuscator.io-style: 270+ entry rotated string array, RC4+base64 decoders, hex-encoded dispatchers...

The vulnerability of the console-based graphic editor ImageMagick lies in its dependence on behaviors that are uncertain for each implementation type. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the console-based graphic editor ImageMagick is related to its dependence on behaviors that are uncertain for each implementation type. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...