MAL-2026-1164 Malicious code in yazxzpedia-libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a15db837581bcddfd86653905bef2911ba017a109d3275551bb040e60b61794 The package yazxzpedia-libsignal was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview @yazxzpedia/baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-1155 Malicious code in rullzdigital-libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bfc2bce31260b9826f9f3040d958f28d0229e8db4f0d7bec9bd9404f86fc5a4 The package rullzdigital-libsignal was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview ethglobal-finale is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-1148 Malicious code in ethglobal-finale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08bdc506129e3fb599d1bb0f5c3a369199b3f58ecda5d8c869d47f25847da6ad The package ethglobal-finale was found to contain malicious code. Source: ghsa-malware 051d643dd2d78f5cfda5a7945e560297dae2d0d8abe72d2b1725846b34951f...

MAL-2026-1160 Malicious code in xpack-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62edc6bb089c839e93cf7b71b8b46ca1f5d064272cac586b49cda41fc40b1c19 The package xpack-subscription was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview hackpreinstall is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005794)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005794 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: disable napi on driver removal A warning on driver removal started occurring after...

CVE-2026-0026

In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

MAL-2026-1128 Malicious code in colorize-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f4e60bdcd92f4f5690797fa091f0acb0a463de5c353ded0f6f5e7317a2f84eb The package colorize-console was found to contain malicious code. Source: ghsa-malware a0e5faaa04c5e7d06c634dc2be1f148aa27acb8842f1731dad902bdb3e33d1...

MAL-2026-1119 Malicious code in @nazi-team/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe057f6743744866cb43bc64a47f0b4e814f4de1d503ea59e8b3db6b3880ad00 The package @nazi-team/baileys was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview @nazi-team/libsignal-node is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @daffadeveloper/baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious Package

Overview @daffadeveloper/libsignal-node is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

Malicious Package

Overview ngaturkids is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in sukuna-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07b29340747170d24de4cad05110d564fdbd92e9f3fbbd5af57ab84bf85e619 The package sukuna-baileys was found to contain malicious code. Source: ghsa-malware 5708a63cc8ed7f411f26a07bdf5a6653f438a103c0ddee8518c172f4adb73c73...

Malicious code in ngaturkids (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d589b956682ee26f10996c8dd1b6050d8b9e74e7084a46d8f37ab95f7f7fc3fa The package ngaturkids was found to contain malicious code. Source: ghsa-malware 0dc4b2edbc73fc30831d28dd9a701e650e00edefc7938de256932daff4c42577 Any...

Malicious Package

Overview danzxz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-1129 Malicious code in danzxz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4833c4fc240e2ee3782998738394ab42ff4d28ba2edcdf9e6aa97e195b12b32e The package danzxz was found to contain malicious code. Source: ghsa-malware 3426bcec6ad873a2aee246f7333e939a481c489dbbdffab631e2f588c421b629 Any...

Malicious code in ts-big-number (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644a6ea1bec80a1e6f2dd3ee69a62602237f916e6b2877e126e18d8ef5b7f691 The package ts-big-number was found to contain malicious code. Source: ghsa-malware 490d5033b9169ec80de58a0c2bb8bdbfe435f06200e0b7cc729ce393f2449d40...