PT-2026-124503

TuxCare rebuilt @babel/plugin-proposal-numeric-separator to address 1 CVE. Fixed in 7.16.7-tuxcare.1...

PT-2026-124468

TuxCare rebuilt @babel/plugin-proposal-decorators to address 1 CVE. Fixed in 7.16.7-tuxcare.2...

PT-2026-124442

TuxCare rebuilt @babel/plugin-proposal-class-properties to address 1 CVE. Fixed in 7.12.13-tuxcare.1...

PT-2026-124433

TuxCare rebuilt @babel/plugin-proposal-class-properties to address 1 CVE. Fixed in 7.14.8-tuxcare.1...

PT-2026-124437

TuxCare rebuilt @babel/plugin-proposal-class-properties to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

PT-2026-124533

TuxCare rebuilt @babel/plugin-proposal-optional-chaining to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

PT-2026-124443

TuxCare rebuilt @babel/plugin-proposal-class-properties to address 2 CVEs. Fixed in 7.12.13-tuxcare.3...

PT-2026-124463

TuxCare rebuilt @babel/plugin-proposal-decorators to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

PT-2026-124459

TuxCare rebuilt @babel/plugin-proposal-decorators to address 1 CVE. Fixed in 7.12.5-tuxcare.1...

PT-2026-124485

TuxCare rebuilt @babel/plugin-proposal-nullish-coalescing-operator to address 1 CVE. Fixed in 7.12.5-tuxcare.1...

PT-2026-124483

TuxCare rebuilt @babel/plugin-proposal-nullish-coalescing-operator to address 1 CVE. Fixed in 7.14.8-tuxcare.1...

PT-2026-124527

TuxCare rebuilt @babel/plugin-proposal-optional-chaining to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

Malicious code in plugin-proposal (npm)

--- Credit: OpenSSF source...

Malicious code in plugin-proposal (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7348 Malicious code in plugin-proposal (npm)

--- -= Per source details. Do not edit below this line.=-...

Malware in plugin-proposal-private-methods

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in plugin-proposal-json-strings

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in plugin-proposal-json-strings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c11469c014eaf5720410613f78c79dd6cd0aa28aca6fd52a0152441fb13b242e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in plugin-proposal-export-default-from (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09e67c1f58311edfee436c15f6e587d6bfc574cf3ea5c5a69afaea70790652b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in plugin-proposal-export-default-from

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...