Malicious code in bigops-legacy-telephony-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610b2084c8573d9a89262f1a4dcd8ff26acdcc0568f7fa29ac5a921a292e390a On require of this package, index.js loads init.js which at module load fetches a platform-specific binary from hostnames reassembled at runtime from...

Malicious code in bigops-legacy-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb10772ad63d0dbea89e74d3ad56deb097746551202cae3fb1a253b42ca11e0 On require'bigops-legacy-utils', index.js loads polyfill.js which selects a platform-specific payload path, downloads opaque binary bytes from...

MAL-2026-13222 Malicious code in bigops-legacy-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb10772ad63d0dbea89e74d3ad56deb097746551202cae3fb1a253b42ca11e0 On require'bigops-legacy-utils', index.js loads polyfill.js which selects a platform-specific payload path, downloads opaque binary bytes from...

Malicious code in bigops-jsonpath-mapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 784552abf30d07bd647e0c3844dc45ea0205cf20c166ca1e38ef924c5fd999b7 On require of bigops-jsonpath-mapper, index.js loads bridge.js which assembles hostnames from string-array joins to hide the destinations...

MAL-2026-13220 Malicious code in bigops-jsonpath-mapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 784552abf30d07bd647e0c3844dc45ea0205cf20c166ca1e38ef924c5fd999b7 On require of bigops-jsonpath-mapper, index.js loads bridge.js which assembles hostnames from string-array joins to hide the destinations...

Malicious code in bigops-logs-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a922558781f9614bc47976e2e695cc8a5996ef51865fb5b37928f842718b5d On require of bigops-logs-player, index.js loads polyfill.js, which reconstructs a list of Cloudflare Workers hostnames...

MAL-2026-13223 Malicious code in bigops-logs-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a922558781f9614bc47976e2e695cc8a5996ef51865fb5b37928f842718b5d On require of bigops-logs-player, index.js loads polyfill.js, which reconstructs a list of Cloudflare Workers hostnames...

CVE-2026-9195 Cross-site scripting in Progress MarkLogic Server Query Console

A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a crafted URL to execute arbitrary JavaScript in the administrator's browser session, capture credentials, and perfo...

EUVD-2026-53430

A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a crafted URL to execute arbitrary JavaScript in the administrator's browser session, capture credentials, and perfo...

CVE-2026-9195 Cross-site scripting in Progress MarkLogic Server Query Console

A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a crafted URL to execute arbitrary JavaScript in the administrator's browser session, capture credentials, and perfo...

CVE-2026-9195

A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a crafted URL to execute arbitrary JavaScript in the administrator's browser session, capture credentials, and perfo...

CVE-2026-9195

Progress MarkLogic Server Query Console is affected by a cross-site scripting (XSS) vulnerability in versions before 11.3.6 and 12.0.3. The issue allows a remote attacker to lure an authenticated administrator to a crafted URL, enabling arbitrary JavaScript execution in the administrator’s browse...

Malicious code in bigops-notes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b318f6ad8ba92430c504fd94111609cc003a62f8bce36e3c1f41308b195dae On require of bigops-notes, bootstrap.js selects a platform-specific asset, downloads an opaque binary from one of four runtime-assembled .workers.de...

MAL-2026-13227 Malicious code in bigops-notes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b318f6ad8ba92430c504fd94111609cc003a62f8bce36e3c1f41308b195dae On require of bigops-notes, bootstrap.js selects a platform-specific asset, downloads an opaque binary from one of four runtime-assembled .workers.de...

Malicious code in bigops-nitro-events-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d222994e1816e63b4047f5396bbfda8d6d2ccd6bbc840da4872aa026f879525 The package's index.js requires./shim on load. shim.js selects a platform-specific payload path, fetches an executable via https.get from one of thre...

MAL-2026-13226 Malicious code in bigops-nitro-events-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d222994e1816e63b4047f5396bbfda8d6d2ccd6bbc840da4872aa026f879525 The package's index.js requires./shim on load. shim.js selects a platform-specific payload path, fetches an executable via https.get from one of thre...

MAL-2026-13225 Malicious code in bigops-nitro-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbd116994566a3e99f61697a738787d8089c2c99dbc9d5c55f9f3902a6b8cff On require, index.js loads vendor.js which downloads a platform-specific native binary from rotating Cloudflare Workers endpoints...

Malicious code in bigops-nitro-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbd116994566a3e99f61697a738787d8089c2c99dbc9d5c55f9f3902a6b8cff On require, index.js loads vendor.js which downloads a platform-specific native binary from rotating Cloudflare Workers endpoints...

Malicious code in bigops-outgoing-call (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536ee260eadf72447df4e01eb549a86779846d21b3b9b539b486f2bcd65ba750 On require of index.js the package loads runtime.js, which selects a platform-specific asset path and fetches an opaque binary from one of four...

MAL-2026-13231 Malicious code in bigops-outgoing-call (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536ee260eadf72447df4e01eb549a86779846d21b3b9b539b486f2bcd65ba750 On require of index.js the package loads runtime.js, which selects a platform-specific asset path and fetches an opaque binary from one of four...