CVE-2026-1008

A stored cross-site scripting XSS vulnerability exists in the user profile text fields of Altium 365. Insufficient server-side input sanitization allows authenticated users to inject arbitrary HTML and JavaScript payloads using whitespace-based attribute parsing bypass techniques. The injected...

MAL-2026-224 Malicious code in inquirer-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 477898ce4223aefeb43a52fa776b7236a069b176dff1c3a9cbfbb13ad57d6a59 The package inquirer-js was found to contain malicious code. Source: ghsa-malware 06897ddbb1fc8aa0c06fc7389198f7f96eceefdbbc08ead1032436eb45a0a0c3 An...

MAL-2026-220 Malicious code in framer-motion-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e5cb35fb0103b934b0b73f1556a3b5a7b83ecb9cd1c627b4c44d4a35d658f3 The package framer-motion-js was found to contain malicious code. Source: ghsa-malware 3ef4e281f7e4f36adf0bb94b56ac5c7c3d34d58b634939eb1cab10906136e9...

Malicious code in awsm-acslibs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75908418c77ed1eed9d51f2880e20a9608a49fe6e21582715517f0fa4044d349 The package awsm-acslibs was found to contain malicious code. Source: ghsa-malware 566e39645aaa10c8e2d212725d48fa1023624b811c5d98b6c4cf6354d1beba95 A...

Malicious code in garfield777 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3626bdc556c590b7c14c524662be21b2c32762a7f92d11468d00e3b2bc11283c The package garfield777 was found to contain malicious code. Source: ghsa-malware 4f2e8d9e848ec713987e09976d8945d2e64232ae0f12a753838199009b91f361 An...

Malicious code in cdd-plugin-for-datawarrior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab7ca6ae4de6f4b1898f1507f69f89459ab40983852692e28a6b599f9e2318f The package cdd-plugin-for-datawarrior was found to contain malicious code. Source: ghsa-malware...

Malicious code in qxytest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8a49d4366751e26ed3fc66c1a478073c6d45eb5c8b92975a4827491e8ab108 The package qxytest was found to contain malicious code. Source: ghsa-malware f6079d7fcf20fd88c7195d9f4b2e7f2fcde1e43e6783075abae2b7450da08cfe Any...

MAL-2026-47 Malicious code in tiny-model-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a69a5156f95b3b1ddd3a9c0ddd7e1fad0cdd92841e56dc6ea7b950a35a5eb34 The package tiny-model-update was found to contain malicious code. Source: ghsa-malware...

Malicious code in wifi-killer-xnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc233a0f06c7d7ecc69b5b2166295c9e8b63c8c05198355f8f80295907125e17 The package wifi-killer-xnet was found to contain malicious code. Source: ghsa-malware 98f1d50e89f69d69cfae05f464ddc4db1ea8e83fb48168cad1f75c87d4705a...

MAL-2025-192628 Malicious code in elf-stats-wintry-chimney-348 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ca968ff9d74512694f4175979de59da80fad3394cebfb3f6c09f6900309a2a The package elf-stats-wintry-chimney-348 was found to contain malicious code. Source: ghsa-malware...

Malicious code in okta-mfa-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ebb2032d926e5816a1691e5d8260071225622a855da97c958eb62bdc038c6d9 The package okta-mfa-library was found to contain malicious code. Source: ghsa-malware 108be553f36138742a538cfeeead5e936c7b26a0ceeea8f626656acbf1bd47...

Malicious code in chai-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b74105dd25d6c4527e469282746ab5847ca41c5f21873099aa73bcf848f99432 The package chai-async was found to contain malicious code. Source: ghsa-malware 5eadd1bc38807a3c5bcec1c37a5d1a1de8bf81bfed4a5a7ba235a1e6f8ec34aa Any...

Malicious code in pp-js-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ef567b818a3642f6a51a1d26f23c897c1ecc73c6e431361ee1512d288ab455 The package pp-js-lib was found to contain malicious code. Source: ghsa-malware ba1fcfff2f6e86511e78c7092763167dfd731beef4f008cc933bf1bb5b4255e1 Any...

MAL-2025-192564 Malicious code in sdbao-content-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 352174ed8ad21b72357fc69c51e395ee7b1ceb75b55603d205bdc8280dfc00b1 The package sdbao-content-report was found to contain malicious code. Source: ghsa-malware...

Malicious code in abrhide (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915c7fe51aff6bedb2be97556debe08a952d2389c97d427479beda9d5d9d3ca6 The package abrhide was found to contain malicious code. Source: ghsa-malware 06ce2fae0c8baa7ffbe797fa1b7e090a96bcbc928e66921a8c8aa2dd788b276c Any...

MAL-2025-192422 Malicious code in real-time-tweet-streamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692b2a444eb479ec815e98413b99cd6cb677cf8be77edef431d8acf9d6c9e5c5 The package real-time-tweet-streamer was found to contain malicious code. Source: ghsa-malware...

Malicious code in node-calculator-0d96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a218c7694e38a516577be3b65e74e782080f98629b0cc39516beab80562f57b The package node-calculator-0d96 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192307 Malicious code in jsonify-settings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4542f68b7757f5b53642bfaa0e9904aa7fd388338cb001d9e7911b90641a909f The package jsonify-settings was found to contain malicious code. Source: ghsa-malware 286d141ff650d5b4b60b7ad344ea4c0f5b4c3326cf6e7ce1c5e1de74c53094...

MAL-2025-192308 Malicious code in module-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17f403951ae366e78ffa76ef093fdbeb3bd4fa3de3b9753c8d7b56fea6bede2 The package module-listener was found to contain malicious code. Source: ghsa-malware c922f84811ce200feff2b048957a9b81b6e78d33db6abc439c1ce9ef7a0950a...

Malicious code in elf-stats-bright-cocoa-293 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0977b2c356749420c94387d2037758a63eca2cf223b813843e975652cdc9a2d3 The package elf-stats-bright-cocoa-293 was found to contain malicious code. Source: ghsa-malware...