MAL-2026-3404 Malicious code in @matjp/dvi-decode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285904d13f5d698c3c33461fe969265ca73c3041db80eabe5637c1ebd3f3ca9b The package @matjp/dvi-decode was found to contain malicious code. Source: ossf-package-analysis...

CVE-2026-43898

creationtimestamp| type| source ---|---|--- 2026-05-09 09:46:56+00:00| published-proof-of-concept| https://github.com/nyariv/SandboxJS/security/advisories/GHSA-g8f2-4f4f-5jqw 2026-05-15 04:29:28+00:00| seen| https://dnsc.ro/citeste/alerta-vulnerabilitate-critica-in-biblioteca-sandboxjs 2026-05-25...

MAL-2026-3400 Malicious code in typo-crypto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64edea611ad8e383c09495a7a6f7afd4fb86b88136c331ddf787bf0285259bf3 The package typo-crypto was found to contain malicious code...

CVE-2026-5341

creationtimestamp| type| source ---|---|--- 2026-05-08 12:49:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mldrd3ilzy2i...

CVE-2026-29202

creationtimestamp| type| source ---|---|--- 2026-05-08 11:49:02+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/cpanel-security-advisory-av26-437 2026-05-08 12:13:22+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus-2026-13 2026-05-08 12:44:10+00:00| seen|...

CVE-2026-41421

creationtimestamp| type| source ---|---|--- 2026-05-08 11:02:14+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mldle5irzt2m...

CVE-2026-44927

creationtimestamp| type| source ---|---|--- 2026-05-08 09:00:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mldeknfdbn2p 2026-05-09 18:56:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlgwdkirbd2z 2026-05-10 08:16:23+00:00| seen|...

CVE-2026-41902

creationtimestamp| type| source ---|---|--- 2026-05-07 19:59:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbywo2erm2c 2026-05-07 22:57:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlccuagnxj2e 2026-09-12 10:00:13+00:00| seen|...

CVE-2026-42214

creationtimestamp| type| source ---|---|--- 2026-05-07 19:53:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbykxqgym26 2026-09-12 10:00:13+00:00| seen| https://t.me/shimiscyberworld/1280 2026-09-13 00:00:38+00:00| seen| https://t.me/shimiscyberworld/1280...

CVE-2026-40004

creationtimestamp| type| source ---|---|--- 2026-05-07 05:12:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlaheho2tk2h...

CVE-2026-42788

creationtimestamp| type| source ---|---|--- 2026-05-07 04:10:29+00:00| seen| https://gist.github.com/alon710/60dab51279f6b991c4df239e6fd329b2...

CVE-2026-43275

creationtimestamp| type| source ---|---|--- 2026-05-06 14:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6uqtt57u2p 2026-07-02 06:18:09+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-08-03 06:53:59+00:00| seen...

BELL-CVE-2026-31733

Bulletin has no description...

CVE-2026-42027

creationtimestamp| type| source ---|---|--- 2026-05-05 20:20:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4z5cnhi52s...

CVE-2026-31520

creationtimestamp| type| source ---|---|--- 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506...

CVE-2026-25588

creationtimestamp| type| source ---|---|--- 2026-05-05 12:03:10+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/redis-security-advisory-av26-423 2026-05-07 05:34:51+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-redis 2026-05-07 20:00:00+00:00| seen|...

CVE-2026-2729

creationtimestamp| type| source ---|---|--- 2026-05-05 10:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3zrsedcp2c...

CVE-2026-6702

creationtimestamp| type| source ---|---|--- 2026-05-05 06:26:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3kk5lcqb2k 2026-05-09 01:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlf3zgnxta2g...

CVE-2026-7738

creationtimestamp| type| source ---|---|--- 2026-05-04 11:11:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzjyicqro2o...

Malicious Package

Overview @m0ntana/app.web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...