MAL-2026-1679 Malicious code in chai-promised-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5884b19c92ddf330516683f9cc004dabf1dd94e8fe15d4c809d59ecb63dc55c0 The package chai-promised-async was found to contain malicious code...

MAL-2026-1674 Malicious code in chai-await-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba2ac08d1a163026221030089df15f1e10a15be587c27714e659f4a98ec51bf The package chai-await-cli was found to contain malicious code...

MAL-2026-1673 Malicious code in chai-await-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee42e0ab59b1093e2cb5da46d6e015073bbae0cba06eb9a0720df44e54c9c111 The package chai-await-chain was found to contain malicious code...

MAL-2026-1669 Malicious code in chai-as-prompt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b773fc994ff2fb27407b9ab4482deb4ab95bf5d772a226a80db73f0e0740b8b The package chai-as-prompt was found to contain malicious code...

Malicious code in cat-ecommerce-alloy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78afabd939f190b79fbfccc3bbc3a75170c57fb5142f9ae07849e36bc48c199a The package cat-ecommerce-alloy was found to contain malicious code...

MAL-2026-1664 Malicious code in brisk-web-ssr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca871bc80853efc77cb6ead479434624e2f9b148a1de2dd7a18f5d784c4e1499 The package brisk-web-ssr was found to contain malicious code...

MAL-2026-1654 Malicious code in aligntypeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183e67707e27ac2c677e51c47293159521704492da3c056e94f2c83927a1b01a The package aligntypeer was found to contain malicious code...

Malicious code in @nxt-costco-com/forge-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0e0f35823f6346841117866bac7213bfac75a55af137f2e63b2ac33dba9a54 The package @nxt-costco-com/forge-components was found to contain malicious code...

MAL-2026-1630 Malicious code in @measures/responsive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e32ee5d76a578e04ae48dc0f9a6cea0cdfe505dd50a0e61b7d44e88dcbdf9a5 The package @measures/responsive was found to contain malicious code...

MAL-2026-1606 Malicious code in @emerald-react/datepicker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f364652ac7b03828a4bc962c38182499ca673463ce30d328f6171f1b6331cd8 The package @emerald-react/datepicker was found to contain malicious code...

Malicious code in @emerald-react/chat-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0a6cbe19a31d336779d3e0975557852cb92372627904ed87950dfe35b67410 The package @emerald-react/chat-bot was found to contain malicious code...

MAL-2026-1601 Malicious code in @emerald-react/button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a53b07341310aa38bec5a12c64977afb8a97b940baf599f6e8d632417b9997e The package @emerald-react/button was found to contain malicious code...

MAL-2026-1923 Malicious code in sq-minimal-feature-flags (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-1916 Malicious code in freshworks-ruby (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in prometheus-analysis-1 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-1905 Malicious code in loveclose1 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-1902 Malicious code in helloharry123t-package (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in curl-requester (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bigmathutils (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2026-28500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass...