PT-2026-124522

TuxCare rebuilt @babel/plugin-proposal-optional-chaining to address 1 CVE. Fixed in 7.16.7-tuxcare.1...

PT-2026-124533

TuxCare rebuilt @babel/plugin-proposal-optional-chaining to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

PT-2026-124529

TuxCare rebuilt @babel/plugin-proposal-optional-chaining to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

PT-2026-124528

TuxCare rebuilt @babel/plugin-proposal-optional-chaining to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

PT-2026-124505

TuxCare rebuilt @babel/plugin-proposal-numeric-separator to address 1 CVE. Fixed in 7.12.18-tuxcare.1...

PT-2026-124436

TuxCare rebuilt @babel/plugin-proposal-class-properties to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

PT-2026-124466

TuxCare rebuilt @babel/plugin-proposal-decorators to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

PT-2026-124463

TuxCare rebuilt @babel/plugin-proposal-decorators to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

PT-2026-124484

TuxCare rebuilt @babel/plugin-proposal-nullish-coalescing-operator to address 1 CVE. Fixed in 7.12.18-tuxcare.1...

PT-2026-124459

TuxCare rebuilt @babel/plugin-proposal-decorators to address 1 CVE. Fixed in 7.12.5-tuxcare.1...

PT-2026-124487

TuxCare rebuilt @babel/plugin-proposal-nullish-coalescing-operator to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

PT-2026-124512

TuxCare rebuilt @babel/plugin-proposal-numeric-separator to address 1 CVE. Fixed in 7.16.7-tuxcare.2...

PT-2026-124434

TuxCare rebuilt @babel/plugin-proposal-class-properties to address 1 CVE. Fixed in 7.12.18-tuxcare.1...

PT-2026-124442

TuxCare rebuilt @babel/plugin-proposal-class-properties to address 1 CVE. Fixed in 7.12.13-tuxcare.1...

PT-2026-124461

TuxCare rebuilt @babel/plugin-proposal-decorators to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

Malicious code in plugin-proposal (npm)

--- Credit: OpenSSF source...

MAL-2026-7348 Malicious code in plugin-proposal (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in plugin-proposal (npm)

--- -= Per source details. Do not edit below this line.=-...

Malware in plugin-proposal-private-methods

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in plugin-proposal-json-strings

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...