MAL-2026-6075 Malicious code in opt-archetype-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6497b3f44c017bc9ba783cd75e17d4992f79542d8819558da92e152ee4d4471e On npm install, the package's postinstall hook executes node index.js, which collects the installer's public IP via api.ipify.org, hostname, username...

CVE-2026-55603

creationtimestamp| type| source ---|---|--- 2026-06-17 17:17:39+00:00| published-proof-of-concept| https://github.com/chimurai/http-proxy-middleware/security/advisories/GHSA-gcq2-9pq2-cxqm 2026-06-23 09:03:07+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mox25jonrk2t...

CVE-2026-55602

creationtimestamp| type| source ---|---|--- 2026-06-17 17:17:28+00:00| published-proof-of-concept| https://github.com/chimurai/http-proxy-middleware/security/advisories/GHSA-64mm-vxmg-q3vj...

CVE-2026-55686

creationtimestamp| type| source ---|---|--- 2026-06-17 16:22:45+00:00| published-proof-of-concept| https://github.com/podman-container-tools/podman/security/advisories/GHSA-q6r4-3wmg-fwcq 2026-06-26 18:39:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7lqvuf5f26...

CVE-2026-55093

creationtimestamp| type| source ---|---|--- 2026-06-17 15:29:25+00:00| published-proof-of-concept| https://github.com/sonos/tract/security/advisories/GHSA-x5mv-8wgw-29hg...

CVE-2026-54695

creationtimestamp| type| source ---|---|--- 2026-06-17 14:39:37+00:00| published-proof-of-concept| https://github.com/pipecat-ai/pipecat/security/advisories/GHSA-j8cv-x86q-rj85 2026-07-09 20:26:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqahs45ntd2x...

CVE-2026-55471

creationtimestamp| type| source ---|---|--- 2026-06-17 13:06:00+00:00| published-proof-of-concept| https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-2f55-g35j-5jmf 2026-07-08 22:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq64rso5sc2z...

CVE-2026-55518

creationtimestamp| type| source ---|---|--- 2026-06-17 06:07:29+00:00| published-proof-of-concept| https://github.com/avo-hq/avo/security/advisories/GHSA-8fq9-273g-6mrg 2026-07-17 21:22:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquomye4t32s 2026-07-17 22:01:05+00:00|...

CVE-2026-55636

creationtimestamp| type| source ---|---|--- 2026-06-17 04:48:18+00:00| published-proof-of-concept| https://github.com/projectcapsule/capsule/security/advisories/GHSA-gwxr-7h77-7777...

CVE-2026-55450

creationtimestamp| type| source ---|---|--- 2026-06-17 03:40:00+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-x223-p2gf-v735 2026-06-22 00:56:19+00:00| seen| https://bsky.app/profile/kitafox.bsky.social/post/3motoi5iyzb2k 2026-06-27...

CVE-2026-55187

creationtimestamp| type| source ---|---|--- 2026-06-17 03:22:25+00:00| published-proof-of-concept| https://github.com/axllent/mailpit/security/advisories/GHSA-w4mc-hhc6-xp28 2026-07-11 03:14:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdp2lqp2d2z...

CVE-2026-55091

creationtimestamp| type| source ---|---|--- 2026-06-16 22:51:04+00:00| published-proof-of-concept| https://github.com/joaonuno/flat-to-nested-js/security/advisories/GHSA-hp36-v28f-w3r4...

CVE-2026-54905

creationtimestamp| type| source ---|---|--- 2026-06-16 21:35:27+00:00| published-proof-of-concept| https://github.com/ruby-concurrency/concurrent-ruby/security/advisories/GHSA-wv3x-4vxv-whpp...

CVE-2026-54904

creationtimestamp| type| source ---|---|--- 2026-06-16 21:35:21+00:00| published-proof-of-concept| https://github.com/ruby-concurrency/concurrent-ruby/security/advisories/GHSA-h8w8-99g7-qmvj 2026-06-24 21:35:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2ungvwp42p 2026-07-20...

CVE-2026-54906

creationtimestamp| type| source ---|---|--- 2026-06-16 21:35:12+00:00| published-proof-of-concept| https://github.com/ruby-concurrency/concurrent-ruby/security/advisories/GHSA-6wx8-w4f5-wwcr...

CVE-2026-55388

creationtimestamp| type| source ---|---|--- 2026-06-16 21:00:59+00:00| published-proof-of-concept| https://github.com/piscinajs/piscina/security/advisories/GHSA-x9g3-xrwr-cwfg 2026-06-22 16:44:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116794762930791425 2026-06-22...

CVE-2026-55886

creationtimestamp| type| source ---|---|--- 2026-06-16 19:07:20+00:00| published-proof-of-concept| https://github.com/xdan/jodit/security/advisories/GHSA-vpmm-x3fm-qr5c 2026-07-02 12:51:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpo33qzbo72u...

CVE-2026-55591

creationtimestamp| type| source ---|---|--- 2026-06-16 18:01:53+00:00| published-proof-of-concept| https://github.com/SignalK/signalk-server/security/advisories/GHSA-q59x-jc9f-gfqf...

MAL-2026-5890 Malicious code in @dsft/ft-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80ec07b8de5ed0e8cf43a8584075210d47e80e7bcc04368a5029f7637188db3 The package is a dependency-confusion proof-of-concept squatting on the @dsft/ scope. Its package.json declares a preinstall hook that runs index.js,...

CVE-2026-54900

creationtimestamp| type| source ---|---|--- 2026-06-16 14:37:57+00:00| published-proof-of-concept| https://github.com/ohler55/oj/security/advisories/GHSA-9cv6-qcjw-4grx 2026-07-01 02:27:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhrylv4625 2026-07-02 01:16:41+00:00| seen|...