Malicious code in @larocas-bbresearch/tp-probe-e29834ce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7279432ffb7dc233307df869ac5faaded0fef16333ec8a5948b15bae7bd716a7 The package was found to contain malicious code or consuming dependency that contains malicious code...

MAL-2026-16529 Malicious code in @larocas-bbresearch/tp-probe-e29834ce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7279432ffb7dc233307df869ac5faaded0fef16333ec8a5948b15bae7bd716a7 The package was found to contain malicious code or consuming dependency that contains malicious code...

Malicious code in @larocas-bbresearch/tp-probe-dc7a3670 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @larocas-bbresearch/tombstone-probe-odvz5y (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8361724bb70f161c897f4b6cc3cfb8d2dd3acf32295a4e32181c8a16dd58d13 The package was found to contain malicious code or consuming dependency that contains malicious code...

MAL-2026-16527 Malicious code in @larocas-bbresearch/tombstone-probe-odvz5y (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8361724bb70f161c897f4b6cc3cfb8d2dd3acf32295a4e32181c8a16dd58d13 The package was found to contain malicious code or consuming dependency that contains malicious code...

MAL-2026-16528 Malicious code in @larocas-bbresearch/tp-probe-dc7a3670 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @larocas-bbresearch/tombstone-probe-live-z6xz56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb64220c40c3aaf61d0c2911ff0950a968c4c03d9ba2af1620420077f532a2d The package was found to contain malicious code or consuming dependency that contains malicious code...

MAL-2026-16526 Malicious code in @larocas-bbresearch/tombstone-probe-live-z6xz56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb64220c40c3aaf61d0c2911ff0950a968c4c03d9ba2af1620420077f532a2d The package was found to contain malicious code or consuming dependency that contains malicious code...

Malicious code in @larocas-bbresearch/tombstone-probe-8ejnsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8656a15600371992dd90c60b5c0280339218d62a8f22473380f37eaf8d952e9b The package was found to contain malicious code or consuming dependency that contains malicious code...

MAL-2026-16525 Malicious code in @larocas-bbresearch/tombstone-probe-8ejnsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8656a15600371992dd90c60b5c0280339218d62a8f22473380f37eaf8d952e9b The package was found to contain malicious code or consuming dependency that contains malicious code...

EUVD-2026-84496

In MISP, the statisticsOrgs method in UsersController.php used the organization name directly as a file-system path component when checking for the existence of an organization logo image. The original code called fileexists with a path constructed as APP . 'webroot' . DS . 'img' . DS . 'orgs' . ...

MAL-2026-16379 Malicious code in @user-services/web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02523ee1cb3bbb9119054ec3ed14ffc62d0d33ae3bd44dc29312c772cdba106b @user-services/[email protected] fires a hidden telemetry probe on both the npm install lifecycle node index.js and on every require of the modul...

Malicious Package

Overview bytepack-probe-a7x3 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-16364 Malicious code in bytepack-probe-a7x3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f158536e9d84e6cee18e2a3ce84869e34f1564ec18a1313a9e8c03b304e3d70 package.json declares a dependency leak-internal whose source is the HTTPS tarball URL https://src-ssrf.bytedance.net/ssrf/probe.tgz rather than a...

Malicious code in bytepack-probe-a7x3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f158536e9d84e6cee18e2a3ce84869e34f1564ec18a1313a9e8c03b304e3d70 package.json declares a dependency leak-internal whose source is the HTTPS tarball URL https://src-ssrf.bytedance.net/ssrf/probe.tgz rather than a...

Malicious code in @baanx/blockchain-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6dec4d715e2863e7f55749d6d2a390926f3f2f1df62e4de223c6acc818632d The package runs a bootstrap from both its install lifecycle script node index.js and its main module that invokes an obfuscated probe. The probe rea...

MAL-2026-16352 Malicious code in @baanx/blockchain-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6dec4d715e2863e7f55749d6d2a390926f3f2f1df62e4de223c6acc818632d The package runs a bootstrap from both its install lifecycle script node index.js and its main module that invokes an obfuscated probe. The probe rea...

Malicious code in test1df23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67708642854d76da722a8130de47a8fb7fd23f0035cf646f1bf16d97419e5756 package.json declares preinstall and postinstall hooks that execute index.js on npm install. index.js issues an HTTP GET to the hardcoded bare IP...

SUSE CVE-2026-89933

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe When the device is enumerated through its ACPI HID IFX3100, i2cclientgetdeviceid returns NULL: the ACPI-derived client name does not match the driver's i2cdeviceid...

SUSE CVE-2026-90351

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed If the WED attach for the primary PCIe function fails, the probe path still attached wedhif2 for the secondary function, leaving the device in an...