org.webjars.npm:directory-encoder (=0.9.2), org.webjars.npm:engine-handlebars (=0.8.2) +6 more potentially affected by CVE-2026-33939 via org.webjars.npm:handlebars (>=4.0.14 <=4.7.8)

org.webjars.npm:handlebars MAVEN version =4.0.14, =1.5.0, =2.0.0, =2.0.0, =2.1.0, =2.1.1 Source cves: CVE-2026-33939 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15807043...

org.webjars.npm:directory-encoder (=0.9.2), org.webjars.npm:engine-handlebars (=0.8.2) +6 more potentially affected by CVE-2026-33938 via org.webjars.npm:handlebars (>=4.0.14 <=4.7.8)

org.webjars.npm:handlebars MAVEN version =4.0.14, =1.5.0, =2.0.0, =2.0.0, =2.1.0, =2.1.1 Source cves: CVE-2026-33938 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15803083...

Malicious code in okta-signin-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1968f15d4faab74927023ad015e009d98087c120d8cb31b4a754faff297219b7 The package okta-signin-widget was found to contain malicious code. Source: ghsa-malware...

Malicious code in pseudo-loc-for-signin-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d100c05109c3b4d84fa03d2463e93fb0b235b5e8f13d497016d190fdbcfc1da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5506 Malicious code in pseudo-loc-for-signin-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d100c05109c3b4d84fa03d2463e93fb0b235b5e8f13d497016d190fdbcfc1da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in courage-for-signin-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 651ba90b6cbf4d05699e79773d63de9bb241b1d23330c1d88b9c2032e8bd52ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2215 Malicious code in courage-for-signin-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 651ba90b6cbf4d05699e79773d63de9bb241b1d23330c1d88b9c2032e8bd52ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...