GHSA-5835-4GVC-32PC

creationtimestamp| type| source ---|---|--- 2026-04-17 17:31:16+00:00| seen| Telegram/bhyT7i4V2BArCJwfUMt9o2rqwfY7TKMJyzxFMsGDU3QsWI...

CVE-2026-23776

creationtimestamp| type| source ---|---|--- 2026-04-17 10:03:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjoocbn3kw2p 2026-04-17 11:17:38+00:00| seen| Telegram/5633r4xfXJbBvOpK1TKum1SS45MMcuVmCuqMLC0m75x4a28 2026-04-17 13:09:01+00:00| seen|...

PT-2026-33426

Name of the Vulnerable Software and Affected Versions Sparx Pro Cloud Server affected versions not specified Description An unauthenticated user can execute arbitrary SQL commands in the database. This SQL injection allows for a complete database takeover without requiring credentials...

CVE-2026-6365

creationtimestamp| type| source ---|---|--- 2026-04-16 11:30:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjmcoi7iox2s 2026-04-16 11:31:46+00:00| seen| https://bsky.app/profile/thedroptimes.bsky.social/post/3mjmcqi4ws72o 2026-05-20 02:41:25+00:00| seen|...

MAL-2026-2798 Malicious code in request-easy-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59057b0a6f845ac1e8bfa571c4e26295e469abdd5c6faa2e68007ef78816ec9b request-easy-validator impersonates the popular request package cloned README, bugs URL points at github.com/request/request, source is a fork of...

Malicious code in puzzle-fragment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad106eae22a8aa21a17cd44167776eebe2a94c245f6e224ba0d52312d8dd229c The package puzzle-fragment was found to contain malicious code...

MAL-2026-2779 Malicious code in metrify-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6898154f06df814bd48f3b479a605e61fcffebfc9ce5c39a6904ba24a907ac78 The package metrify-chain was found to contain malicious code...

Malicious code in marketing-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91700ba70a19e0997ef295cbc94c127a9febc336d696ae07b738dc2fbef8cab8 The package marketing-analytics was found to contain malicious code...

MAL-2026-2776 Malicious code in int-browsing-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91651e0df0a67cf6185a611e7636862de6fb619d7eecf1952902fccc6171b687 The package int-browsing-gateway was found to contain malicious code...

MAL-2026-2763 Malicious code in gemini-ai-checker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce523af945a4246ec60ceb49c42757844915ea6b3657e989e0254ae1212aab92 The package gemini-ai-checker was found to contain malicious code...

Malicious code in deployer-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da11ad369455db7b2449adf6bc2da43741e5ae36ae35188889dab9cbd7f221b8 The package deployer-kit was found to contain malicious code...

MAL-2026-2751 Malicious code in coremeshnode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73581f65b19dbb45cdfe8c3ab269c673d7c062e4a1a76e7c85f6a4d6bc09a252 The package coremeshnode was found to contain malicious code...

MAL-2026-2737 Malicious code in business-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cf2ae4dcc02b71af0e0b806893b36de2c89d775c82272eea71c6d87ac37f1f3 The package business-data was found to contain malicious code...

MAL-2026-2728 Malicious code in apl-announcements (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5e32781749c59464ed1f8d649c60102886b11838297e856aeaa3be42ed15f1 The package apl-announcements was found to contain malicious code...

Malicious code in @the-coca-cola-company/receipt-scanner-admin-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046b5475599d30f293f2eeb7ab9fce35c44cd678ab2cecde2c96e588a170d822 The package @the-coca-cola-company/receipt-scanner-admin-lib was found to contain malicious code...

MAL-2026-2715 Malicious code in @mesh-atoms/typography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec6ac39821bf7c99a476b848fcfccf47089487d33dc8eeb893b9f87e6dc7f847 The package @mesh-atoms/typography was found to contain malicious code...

Malicious code in @3stripes/sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78177fb122038c79210d2b2a9b477a78c4d918bfc9819382745e541503a7e8ea The package @3stripes/sdk was found to contain malicious code...

MAL-2026-2704 Malicious code in @3stripes/config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fea72a3f12c815ec03d587d20386eb4726c301d381fa23d720c25dc903bdcb4 The package @3stripes/config was found to contain malicious code...

CVE-2026-1711

creationtimestamp| type| source ---|---|--- 2026-04-15 22:10:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkvy5irjm2o...

MAL-2026-2740 Malicious code in chai-as-type (npm)

chai-as-type is a malicious npm package that when imported downloads a C2 dropper from https://api.npoint.io/c26313f0733957a7d787 and executes it similar to malware in to chai-await-test. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector...