CVE-2026-102930

A flaw was found in virtualenv. When fetching seed packages such as pip or setuptools during environment creation or updates, virtualenv does not verify the integrity of downloaded files against authoritative cryptographic checksums. A network attacker or compromised mirror could substitute...

Malicious code in kurniawan-mieayam50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198d8ab4b07a24997e24ac3c35876f7b6d4ae0854f5b4ec5183e2ce17fca3e4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...