Malicious code in polmarket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f6a7f9b6e3b1841c2ab98dd4f2b65abf89d0ff9632d58fe14a1b2b9f5ac846 The package polmarket was found to contain malicious code. Source: ghsa-malware be6a87de77c124ff75dbce268ef62ae226ca99de2026d5178d14f6b38ba0888b Any...

MAL-2026-1202 Malicious code in mvn-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7439c73d7a34dad9485537cc4adefa71514a16e38e08a171c099933110bfa5c The package mvn-runtime was found to contain malicious code. Source: ghsa-malware 3af620cf3afd7a0d522823f8835bdf289b697f5be39cf61e22e7f1f0da6ec7aa An...

Malicious code in mvn-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7439c73d7a34dad9485537cc4adefa71514a16e38e08a171c099933110bfa5c The package mvn-runtime was found to contain malicious code. Source: ghsa-malware 3af620cf3afd7a0d522823f8835bdf289b697f5be39cf61e22e7f1f0da6ec7aa An...

MAL-2026-1188 Malicious code in alpha-replicator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 813b40640376929ec6b2c1eac05da3cf3248e3ad74ea5f28ec2c6770a81b039d The package alpha-replicator was found to contain malicious code. Source: ghsa-malware 2a31df37c5505c0c72366c3a25757305201aa2db41da2a774157074244006a...

Malicious code in bubblemap-bypass-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18639f5df9977e99869d513c7daa36c9a83720ceaf920d117ae64b4e50a16eb The package bubblemap-bypass-sdk was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1195 Malicious code in consolelofy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9026237dcb17ce59b31ce42b7af60ddbe094cb955735a5dc1833275d5f01c7a The package consolelofy was found to contain malicious code. Source: ghsa-malware a251667effca1d80bd932709965abc6f6c61172812756404c3b8b2d7b340e23f An...

Malicious code in demo-ip-package-cm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 756fbc97ea8b65830898805513bede65c955e6ae300a4d19574e984d17615b37 The package demo-ip-package-cm was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1187 Malicious code in @twilio-client/twilio-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d655ae7b2eb263b5d3c630c72182a60a7012272acc57f1816eb73fd1c9119a97 The package @twilio-client/twilio-client was found to contain malicious code. Source: ghsa-malware...

Malicious code in web-prompt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25d3dc9dade58627dd5a799f9069218fc45fc00534c36c5ec6adcc972e18c5f The package web-prompt was found to contain malicious code. Source: ghsa-malware 1c2c7c89562fb0e8f3db62cdf48f299b872398a2ea68e0a2e0b503c3cd7bd54a Any...

Malicious code in @global-dax-ad-platform/dax-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465668b4ba6f4c109320a3407a4db8d254d21a7f43af75ca5f8c1873c12c7f46 The package @global-dax-ad-platform/dax-types was found to contain malicious code. Source: ghsa-malware...

Malicious code in hiagentevilmcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e09d1f143c91999c7fa8d60f7aa4164df3faf284036d40e6b655020c49bdb83 The package hiagentevilmcp was found to contain malicious code. Source: ghsa-malware 209c7d8065878076cf2456b7c62417093a08c273371a3bcc6059b240be5b3223...

MAL-2026-1177 Malicious code in graph-dynamic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc9e411d29d7d359cf81fe3140dc3cee9d1583e20ad8bbf32ca9fb9e6e09860 The package graph-dynamic was found to contain malicious code. Source: ghsa-malware 2662ddb0770767495266ae6388242dbeb6fd0dfde8015252228968e4d28e1ad1...

Malicious code in danzxoffc74-libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a41216321e9b425e7d33eef60ae4d705b659dad737e18b8a84bee404d031e4 The package danzxoffc74-libsignal was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1147 Malicious code in danzxoffc74-libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a41216321e9b425e7d33eef60ae4d705b659dad737e18b8a84bee404d031e4 The package danzxoffc74-libsignal was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1158 Malicious code in xpack-arc-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511c9b6f2c89a51bfa23febfa505e5ce2696cd6ae695ee0a7b057e194f10ca2b The package xpack-arc-gateway was found to contain malicious code. Source: ghsa-malware...

Malicious code in ethglobal-finale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08bdc506129e3fb599d1bb0f5c3a369199b3f58ecda5d8c869d47f25847da6ad The package ethglobal-finale was found to contain malicious code. Source: ghsa-malware 051d643dd2d78f5cfda5a7945e560297dae2d0d8abe72d2b1725846b34951f...

MAL-2026-1161 Malicious code in xpack-sui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6569d492596cfa28e2627bd747ac4bd380bf9ff0e7ce0d931036e5f8de9ed276 The package xpack-sui was found to contain malicious code. Source: ghsa-malware 3fab32aa3396f63ec52f77a3d6ba319776c90390afa1264937a1537dde583443 Any...

Malicious code in pool-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 307e708d931ed9e7fc3cadd2e2daf55f69a216e6048275ae16db575e4939c805 The package pool-check was found to contain malicious code. Source: ghsa-malware 2da2c8462239a3dee4b27482f6d094115705cafcf589553f6836bc871a921ae8 Any...

PT-2026-22734

A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package.This issue affects Fireware OS 12.0 up to and including 12.11.7, 12.5.9 up to and including...

PT-2026-22827

Name of the Vulnerable Software and Affected Versions Devolutions Remote Desktop Manager versions 2025.3.30 and earlier Description An issue exists in the connection entry component of the software where the 'Disable password saving in vaults' setting is not properly enforced. This allows an...