Malicious code in h2-codex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0176fe223a6df20d633d05a3e0ab21c2e87d0169342e820beadccc5817acc7bc The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15583 Malicious code in h2-codex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0176fe223a6df20d633d05a3e0ab21c2e87d0169342e820beadccc5817acc7bc The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15586 Malicious code in originaldevelopmentstelemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60940a80ca72863b54a3cc8f1cc7da49be77b38e9111d4cb77cfc1417671f399 The package is advertised as a telemetry utility but its sole exported function, downloadAndRunClient, downloads updater.hta from...

Malicious code in originaldevelopmentstelemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60940a80ca72863b54a3cc8f1cc7da49be77b38e9111d4cb77cfc1417671f399 The package is advertised as a telemetry utility but its sole exported function, downloadAndRunClient, downloads updater.hta from...

MAL-2026-15575 Malicious code in opiumbest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d3c33077e46f79b1a53edad20c8cb8c7fc67c5cbedd8406257cb5ce9581097 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in opiumbest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d3c33077e46f79b1a53edad20c8cb8c7fc67c5cbedd8406257cb5ce9581097 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in node-net-pool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c6bb87249429b2a3f3791589075bf872a433bd47a33b152f6809ccf94b1328 package.json declares a postinstall hook node index.js that runs automatically on npm install. The shipped index.js contains no networking or...

GHSA-5V29-34H8-V68R MapFish Print has XXE that allows reading arbitrary files of certain types

Summary XXE on MapFish Print allows reading arbitrary files of certain types. Eg /etc/passwd or k8 secrets and certs. https://github.com/mapfish/mapfish-print/commit/13020c0fbc299e5f604e4e66066311c4bf04d507 Details To trigger the XXE it is required to host a remote script and dtd file. When using...

EUVD-2026-63985

Incus has a project restriction bypass in instance copy across projects...

GHSA-C9F5-J9C3-MHRG Incus has a project restriction bypass in instance copy across projects

Summary Missing authorization checks exist for instance copying where an attacker knowing the name of a project that they don't have access to and the name of an instance in that project can copy the instance to a new project. This issue could allow an attacker to access secrets in instances they...

Incus has a project restriction bypass for custom volume copy across projects

Summary Missing authorization checks exist for custom volume copying where an attacker who knows the name of a project that they don't have access to and the name of a custom volume in that project can copy the custom volume to a new project. This issue could allow an attacker to access secrets i...

Malicious code in mfa-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afbd77114dc45ac9259720ffd355659d0442c917aff5a734d9ea0ca337cba77 On require'mfa-js', lib/cache.js executes a Windows-gated IIFE that downloads a JavaScript payload from...

Malicious code in borsh-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed0e447cd98b9470a197c1dd9b341e6a93ea6f39088f4f93335979827f707b8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15490 Malicious code in clmm-fee-audit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fcd4c0b7e17eac77e370c1e295e81d8aab97adba9c1c6b8954f26786c852f0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

security-enablement-platform-poc

Security Enablement Platform — POC Status: Work in progre...

MAL-2026-14716 Malicious code in 3layerdipstackcyqc7o (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2dac81f6b14c5ca28b7efb9aaaf366235cc732f031f8b2900f32b285519fc1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackt3wr5f (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4a05b3c271fb16cbc32b977d3ec79f995e775a5c1a3d1583387784a8d8e2ef The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackm7mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac848ba661287ba28da0b3cc4784738bad4003683b89af912b65cdc636db9b5c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14791 Malicious code in 3layerdipstackjsuvtk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7b60734ee5f3f5596286c56fd8a733d82214462041d72a5b539b63601542f3 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14827 Malicious code in 3layerdipstackm7mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac848ba661287ba28da0b3cc4784738bad4003683b89af912b65cdc636db9b5c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...