Malicious code in @nayzak51/primebeem-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda80707c579faf8880cabeefa8ebf20fb33b076337d64cb93a3ebf6e210e29b The package @nayzak51/primebeem-db was found to contain malicious code. Source: ghsa-malware...

Malicious code in acuitymobileapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4731a57ff93dc5dd51ce1cb0579af31f609e3dade55ff76c80e8226c6da8baa7 The package acuitymobileapp was found to contain malicious code. Source: ghsa-malware b11c104a75331254732b5987d89729fb9ac60a888d6843144f2863d391a8ff6...

MAL-2026-555 Malicious code in acuitymobileapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4731a57ff93dc5dd51ce1cb0579af31f609e3dade55ff76c80e8226c6da8baa7 The package acuitymobileapp was found to contain malicious code. Source: ghsa-malware b11c104a75331254732b5987d89729fb9ac60a888d6843144f2863d391a8ff6...

Malicious code in n8n-nodes-zalo-fevox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef5385f68a1dbba64d28aa388e3b9c2ad04f564b853ebee07e9422cac623662 The package n8n-nodes-zalo-fevox was found to contain malicious code. Source: ghsa-malware...

Malicious code in n8n-zalo-fevox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd654ee6bdaaccbd6904ea6d3c5f66219853ee17690b9869800d4ea8ecd6c98 The package n8n-zalo-fevox was found to contain malicious code. Source: ghsa-malware 82aefb1c447eeed101d3038ddd37d6ad6e913375d834a7c8ed9ff3d3eae4e0f4...

MAL-2026-557 Malicious code in n8n-nodes-zalo-fevox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef5385f68a1dbba64d28aa388e3b9c2ad04f564b853ebee07e9422cac623662 The package n8n-nodes-zalo-fevox was found to contain malicious code. Source: ghsa-malware...

MAL-2026-558 Malicious code in n8n-zalo-fevox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd654ee6bdaaccbd6904ea6d3c5f66219853ee17690b9869800d4ea8ecd6c98 The package n8n-zalo-fevox was found to contain malicious code. Source: ghsa-malware 82aefb1c447eeed101d3038ddd37d6ad6e913375d834a7c8ed9ff3d3eae4e0f4...

Malicious code in digital-music-dynmsg-ribbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 539cc4d9f61bd9add970da883b5bd746b0b08614fbf948e143e6a35c606e593f The package digital-music-dynmsg-ribbon was found to contain malicious code. Source: ghsa-malware...

MAL-2026-556 Malicious code in digital-music-dynmsg-ribbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 539cc4d9f61bd9add970da883b5bd746b0b08614fbf948e143e6a35c606e593f The package digital-music-dynmsg-ribbon was found to contain malicious code. Source: ghsa-malware...

MAL-2026-561 Malicious code in transform-regenerator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27369af46b5944368333c959121eb4c1203bb7451f05eab71a7e8d030300331 The package transform-regenerator was found to contain malicious code. Source: ghsa-malware...

Malicious code in syntax-async-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d14dae07d53bcd3b3da9693bf5facb7518fafafe8cc2c54d93cd59ec7a28f1 The package syntax-async-functions was found to contain malicious code. Source: ghsa-malware...

MAL-2026-560 Malicious code in transform-async-to-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3375385fb6c066445341256f9ce616582a713468ea0649853056c24b4aaf1776 The package transform-async-to-generator was found to contain malicious code. Source: ghsa-malware...

MAL-2026-559 Malicious code in syntax-async-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d14dae07d53bcd3b3da9693bf5facb7518fafafe8cc2c54d93cd59ec7a28f1 The package syntax-async-functions was found to contain malicious code. Source: ghsa-malware...

MAL-2026-551 Malicious code in express-lists-routes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c51e8807ad317a804d1d70eac194db27d648b87308eaebf5e7752864c1c03e5 The package express-lists-routes was found to contain malicious code. Source: ghsa-malware...

Malicious code in express-lists-routes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c51e8807ad317a804d1d70eac194db27d648b87308eaebf5e7752864c1c03e5 The package express-lists-routes was found to contain malicious code. Source: ghsa-malware...

MAL-2026-552 Malicious code in json-mapping-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d9a56e7e0fdb852db49a56abffcdded34d184708b167002fe2e199438063aa The package json-mapping-web was found to contain malicious code. Source: ghsa-malware 37a8fbc4bd325b28e53dce222bdb8b8e10ff6f5559edb6e97605e1ee5cec17...

Malicious code in json-mapping-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d9a56e7e0fdb852db49a56abffcdded34d184708b167002fe2e199438063aa The package json-mapping-web was found to contain malicious code. Source: ghsa-malware 37a8fbc4bd325b28e53dce222bdb8b8e10ff6f5559edb6e97605e1ee5cec17...

Malicious code in blockchain-helper-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c11700a2d24dc725d693b0942598bae18970721cbb482671f43c005800569e42 The package blockchain-helper-lib was found to contain malicious code. Source: ghsa-malware...

PT-2026-5212

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 3.5.4 Discourse versions prior to 2025.11.2 Discourse versions prior to 2025.12.1 Discourse versions prior to 2026.1.0 Description Discourse is an open source discussion platform. Non-admin moderators can view...

CVE-2026-24742: Incorrect Authorization

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, non-admin moderators can view sensitive information in staff action logs that should be restricted to administrators only. The exposed information includes webhook payload URLs and...