PYSEC-2026-2499 Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS)

Stored Cross-Site Scripting XSS in the genai/evalsvisualization component of Google Cloud Vertex AI SDK google-cloud-aiplatform versions from 1.98.0 up to but not including 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment...

Malicious code in jupiter-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e0901ca45da110106c60f288b0166fc51c348a44569d7e7ff22af3d19deafe On import jupitersdk, the package's top-level init.py fetches a payload over HTTPS from a public IPFS gateway...

Malicious code in metemask-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a99855c93b46f7b996a005065c319bbb24c9d1f497d05dfd38fc83d1b21facdd metemask-sdk is a typosquat of the legitimate metamask-sdk package. On import, the top-level init.py performs an outbound HTTP fetch to...

MAL-2026-10173 Malicious code in paysafe-vault (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf94daa791fb670bda071f1b90b36f5b1f89dfb2ffc7eb7ccbf798fdff8915c1 The package impersonates a Paysafe Customer Vault SDK but is a credential stealer. index.js defines an exfil routine that collects os.hostname,...

MAL-2026-10172 Malicious code in paysafe-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b2f9f90c8f2efd9e304e6ab0271ac2378954fe724134b4daa4649622a0f416 The package presents itself as a Paysafe payments SDK PaysafeClient with payments.create/get and customers.create/get methods but its index.js contai...

MAL-2026-10169 Malicious code in paysafe-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1dc1a7847e47ee850fe8a4011ce83950962ab65cc742eb52919d13abe431e59 [email protected] impersonates a Paysafe payments SDK package name, description "Paysafe JavaScript SDK", and repository URL...

MAL-2026-10167 Malicious code in paysafe-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4db76c1b389e2c8d019eda8a0b6f3b8c28193fd3f9de4abe6234bab1e595e619 Package presents itself as a Paysafe Checkout SDK but is a credential-stealing lure. index.js defines a PaysafeClient with fake payments/customers AP...

MAL-2026-10135 Malicious code in theta-sdk-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6967c021e95228b33b18be4489fea5d404720cbd21beb53dac8bf7ea4f4d54d1 [email protected] ships src/decrypt.js and src/providers/BaseProvider.js which together implement a hidden execution channel. On module load,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet8.0: aspnetcore-runtime-8.0-8.0.28-1.1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-8.0-8.0.28-1.1.hum1 aarch64, x8664 aspnetcore-targeting-pack-8.0-8.0.28-1.1.hum1 aarch64, x8664...

MAL-2026-10027 Malicious code in @wagni_bot/jupiter-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a61b5c33c6e519d3754f8518272984d1bf3bc2045e4f288ad36ac837d0ecf0 @wagnibot/jupiter-sdk 1.2.0 impersonates the Jupiter Solana DEX SDK namespace but ships no SDK functionality. package.json wires both preinstall and...

MAL-2026-10031 Malicious code in @wagni_bot/orca-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcc40768d3a7cdf73ca8664e00519e42639493a81144d6310af862b91816273 @wagnibot/[email protected] ships a single file, postinstall.js, which is registered as the package main and as both the preinstall and postinstall...

MAL-2026-10033 Malicious code in @wagni_bot/polymarket-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c939d03cb15cd37cd1e4f87e913daefd7407245c771ed23bf12a712cad2c5495 @wagnibot/[email protected] is a credential-stealing package disguised as a Polymarket SDK. index.js exports an empty object; the package ships no...

MAL-2026-10030 Malicious code in @wagni_bot/opensea-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180731324517ae6b27ea40b119dba8f0ab1080a6662ea947f86e8c0de545b0cd Package impersonates the OpenSea SDK namespace name @wagnibot/opensea-sdk, description "Unofficial opensea-sdk SDK" but ships no SDK functionality —...

MAL-2026-10022 Malicious code in @wagni_bot/binance-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecce8bb9640527041b349f2309b950c39c04ed3b3d4de2477c43acc7144eeabc The package advertises itself as a Binance SDK but ships only postinstall.js, which is wired to both preinstall and postinstall lifecycle hooks. On n...

MAL-2026-10035 Malicious code in @wagni_bot/solana-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15edf4a83ab4894a29882072554e493c1673695d5e6aaa734672ba6da084112 Package @wagnibot/solana-sdk impersonates a legitimate Solana SDK but contains no SDK functionality — main points at postinstall.js, which is a...

MAL-2026-10032 Malicious code in @wagni_bot/polygon-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85b2cfd5c419bda02db4b760641cc2ff9c9214b2e17cf6689bb7936866944e7 The package's postinstall.js runs unconditionally on npm install and scans the installer's current working directory and home directory — including...

MAL-2026-10028 Malicious code in @wagni_bot/metemask-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3278c8cf58eb66a4a0b385f9e36f59b1ad9bca93baf2c6de84e40d550d73ba @wagnibot/metemask-sdk is a single-character typosquat of the legitimate metamask-sdk package "metemask" vs "metamask". index.js is an empty stub...

Security Bulletin: IBM i is Affected by Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime [CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, CVE-2026-22018, CVE-2026-34268, CVE-2026-22007]

Summary IBM SDK Java Technology Edition and IBM Runtime Environment Java used by IBM i to support the building and running of Java applications are vulnerable to partial denial-of-service DoS CVE-2026-22021, CVE-2026-22018 and unauthorized access to data CVE-2026-22016, CVE-2026-22013,...

Malicious code in chain-api-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc73eb727778c3a543bdef1f6993d4c8be38da047fc97b7a0614bd195590249 chain-api-sdk presents itself as the upstream multichain-crypto-wallet library: README, badges, package.json repository.url, and homepage all point t...

Malicious code in clavue-agent-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 399c0d2f1fabfa46b35810b70797862a0fd469076fa9496549237ab413ccada2 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...