EUVD-2026-68883

pnpm: A tarball dependency's manifest name escapes nodemodules → arbitrary file write/overwrite on install...

MAL-2025-8451 Malicious code in @malware-test-afire-amass-hover-boxer/test-mlw3-afire-amass-hover-boxer (npm)

The package @malware-test-afire-amass-hover-boxer/test-mlw3-afire-amass-hover-boxer was found to contain malicious code...

Malicious code in @malware-test-ovine-mobby-grant-sadhe/test-mlw3-ovine-mobby-grant-sadhe (npm)

The package @malware-test-ovine-mobby-grant-sadhe/test-mlw3-ovine-mobby-grant-sadhe was found to contain malicious code...