Malicious code in 1kzr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1191bf170b21e0c9c0b1904f808522aa27e23736bb05c9c16332fd1a97e52332 The package 1kzr was found to contain malicious code. Source: ghsa-malware 715d44ba7af24784970425367d9e909f00a7b64031c3004b2fe93628232ab95c Any...

MAL-2026-117 Malicious code in kdb1-demo-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a67f080ec14c4f32313e33736b6b67e59accae55e5e2c388613df54d5b5c85d The package kdb1-demo-v2 was found to contain malicious code. Source: ghsa-malware c1a20b2217012bae0720ec06b437e454ea9f37100cf6bbec5477a5460ff53424 A...

Malicious code in kdb1-demo-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a67f080ec14c4f32313e33736b6b67e59accae55e5e2c388613df54d5b5c85d The package kdb1-demo-v2 was found to contain malicious code. Source: ghsa-malware c1a20b2217012bae0720ec06b437e454ea9f37100cf6bbec5477a5460ff53424 A...

Malicious code in fbfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd19f863aafa8b0d6a355e500577066f9ec36e1cc34262820c743be8ca289b4f The package fbfu was found to contain malicious code. Source: ghsa-malware 98bf9b443e26a63838946f3f4d3e5eafbd1da50efbb104378cea19e41ca78a7b Any...

MAL-2026-112 Malicious code in fbfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd19f863aafa8b0d6a355e500577066f9ec36e1cc34262820c743be8ca289b4f The package fbfu was found to contain malicious code. Source: ghsa-malware 98bf9b443e26a63838946f3f4d3e5eafbd1da50efbb104378cea19e41ca78a7b Any...

MAL-2026-107 Malicious code in 1kzr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1191bf170b21e0c9c0b1904f808522aa27e23736bb05c9c16332fd1a97e52332 The package 1kzr was found to contain malicious code. Source: ghsa-malware 715d44ba7af24784970425367d9e909f00a7b64031c3004b2fe93628232ab95c Any...

Malicious code in sort-imports-es6-autofix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20061f2672fcbe82b13ab8e09c629d93991ef45200bb30c7bf9a1dc78cbb4230 The package sort-imports-es6-autofix was found to contain malicious code. Source: ghsa-malware...

MAL-2026-104 Malicious code in sort-imports-es6-autofix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20061f2672fcbe82b13ab8e09c629d93991ef45200bb30c7bf9a1dc78cbb4230 The package sort-imports-es6-autofix was found to contain malicious code. Source: ghsa-malware...

Malicious code in transform-decorators-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40378c47c2f0fa31a922a290a6ec2a2ea207ca9531f35ff004ee5b7a451e647b The package transform-decorators-legacy was found to contain malicious code. Source: ghsa-malware...

Malicious code in const-enum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a75bfbf64070500e046f70ab9f4422cd37764182dfa1c2d841bdbff803b4e24 The package const-enum was found to contain malicious code. Source: ghsa-malware b9e5e7ad6ed97cfa1d1a71c51090aa5350d5166494a11fa6e6c9bbdad50dfc28 Any...

MAL-2026-105 Malicious code in syntax-class-properties (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf72c51c69dcb71762b580a0299d8e6c413cc2f20b0f9133034a98d43ce4151a The package syntax-class-properties was found to contain malicious code. Source: ghsa-malware...

Malicious code in syntax-class-properties (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf72c51c69dcb71762b580a0299d8e6c413cc2f20b0f9133034a98d43ce4151a The package syntax-class-properties was found to contain malicious code. Source: ghsa-malware...

MAL-2026-106 Malicious code in transform-decorators-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40378c47c2f0fa31a922a290a6ec2a2ea207ca9531f35ff004ee5b7a451e647b The package transform-decorators-legacy was found to contain malicious code. Source: ghsa-malware...

MAL-2026-103 Malicious code in const-enum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a75bfbf64070500e046f70ab9f4422cd37764182dfa1c2d841bdbff803b4e24 The package const-enum was found to contain malicious code. Source: ghsa-malware b9e5e7ad6ed97cfa1d1a71c51090aa5350d5166494a11fa6e6c9bbdad50dfc28 Any...

Malicious code in openblox-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f413a269bb13d7fc0f06d193b4b314762c1418948658dbcce7b416b6cc4e3d4 The package openblox-ts was found to contain malicious code. Source: ghsa-malware 60eca5ca78ef4e2c970e29512a0387609b154359d54bbc1a73473275777615c5 An...

Malicious code in eslint-plugin-supertest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e51e22e6032e74b136ec2615b38bd5801cca8f5a4ef8a09747a442b656ec17 The package eslint-plugin-supertest was found to contain malicious code. Source: ghsa-malware...

MAL-2026-102 Malicious code in redis-cookie-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 509b8c9645600775859de8538bbca62aac7f273789f1b43a370c814e2a061acc The package redis-cookie-ts was found to contain malicious code. Source: ghsa-malware c3c52170c4adfaeed7862716007e61fcaa3cfc702c729b6487746c1f3184f3e...

MAL-2026-100 Malicious code in eslint-plugin-supertest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e51e22e6032e74b136ec2615b38bd5801cca8f5a4ef8a09747a442b656ec17 The package eslint-plugin-supertest was found to contain malicious code. Source: ghsa-malware...

CVE-2025-64305: Cleartext Storage in a File or on Disk

MicroServer copies parts of the system firmware to an unencrypted external SD card on boot, which contains user and vendor secrets. An attacker can utilize these plaintext secrets to modify the vendor firmware, or gain admin access to the web portal...

PT-2026-1845

Name of the Vulnerable Software and Affected Versions Columbia Weather Systems MicroServer affected versions not specified Description The MicroServer copies portions of the system firmware to an unencrypted external SD card during boot. This firmware includes user and vendor secrets in plaintext...