Malicious code in @onereach/idw-sdk (npm)

npm/@onereach/idw-sdk is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished b...

Malicious code in @ornikar/eslint-config (npm)

npm/@ornikar/eslint-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

CVE-2026-62927

creationtimestamp| type| source ---|---|--- 2026-08-04 13:54:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cbcmrvdiup5yg 2026-08-06 12:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msg2mofdzy2f...

MAL-2026-11656 Malicious code in @onereach/styles (npm)

npm/@onereach/styles is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by...

CVE-2026-14175

creationtimestamp| type| source ---|---|--- 2026-08-04 10:18:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hwcppjvzoiqpe 2026-08-04 11:34:23+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msaw6ovmnq2g 2026-08-04 12:00:28+00:00| seen|...

CVE-2026-69245

creationtimestamp| type| source ---|---|--- 2026-08-04 02:31:55+00:00| seen| https://gist.github.com/alon710/4e720b413fb9ae4a89b2607de953bdbe...

CVE-2026-15236

creationtimestamp| type| source ---|---|--- 2026-08-02 11:55:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms3wftwygg24 2026-08-02 11:55:18+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms3wgaibbv23...

CVE-2026-15244

creationtimestamp| type| source ---|---|--- 2026-08-01 14:55:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzq2437k52v 2026-08-01 14:56:18+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzq2ydcbl2j 2026-08-01 15:29:04+00:00| seen|...

PT-2026-67283

Content removed...

CVE-2026-64642

creationtimestamp| type| source ---|---|--- 2026-07-31 15:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrxa7f2zep2m...

CVE-2026-46648

creationtimestamp| type| source ---|---|--- 2026-07-31 12:29:25+00:00| seen| https://bsky.app/profile/moltenbit.bsky.social/post/3mrwxffobr22c...

CVE-2026-64809

creationtimestamp| type| source ---|---|--- 2026-07-31 11:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrwss7tt7d23...

CVE-2026-67439

creationtimestamp| type| source ---|---|--- 2026-07-31 09:31:22+00:00| seen| https://gist.github.com/alon710/4da77a0fb37a106d6065c5dabb250f4c...

CVE-2026-57357

creationtimestamp| type| source ---|---|--- 2026-07-31 08:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrwkskqegu2u...

CVE-2026-63035

creationtimestamp| type| source ---|---|--- 2026-07-31 04:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrw2xzo7sf2d...

CVE-2026-14541

creationtimestamp| type| source ---|---|--- 2026-07-31 04:00:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jjkywoers73sy 2026-07-31 12:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwygrbhhl2y...

CVE-2026-51243

creationtimestamp| type| source ---|---|--- 2026-07-31 03:26:49+00:00| seen| https://gist.github.com/programmervuln/93176789b1e5b46d8aba1038a7d797d9...

CVE-2026-51242

creationtimestamp| type| source ---|---|--- 2026-07-31 03:06:05+00:00| seen| https://gist.github.com/programmervuln/3795f1645c26047a1b358cb7159ceafc 2026-07-31 03:10:09+00:00| seen| https://gist.github.com/programmervuln/87b90903788d5ad7cfc29a83af254244 2026-07-31 03:45:05+00:00| seen|...

CVE-2026-62246

creationtimestamp| type| source ---|---|--- 2026-07-30 23:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvk6yfyz32g 2026-07-31 18:12:34+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrxkkywufs2i...

Malicious code in pretty-log-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad32145cb24ae2a271cecb6379d30a531be17d84a0d71189d3a4afaec20af015 No malicious behavior was identified in this package version. There is no evidence of credential access, environment scraping, network exfiltration,...