CVE-2026-82274

Twenty through 2.35.0 contains an open redirect vulnerability in the OAuthPropagatorController.propagateOAuthCallback endpoint that treats the state query parameter as a redirect URL. Attackers can craft malicious requests to redirect users to arbitrary hosts while forwarding OAuth authorization...

Malicious code in 3layerdipstack9ai4f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad80debb4a4957755c5f2089e44a287a0c9019e769f550b12e6ec0d7eddc22a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14648 Malicious code in 3layerdipstack71tlcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c76775c03270d6161e9fa4d0be119873dc051cbe3ac0c0635687203fbdb8fa The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack0y4arx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0ee85099f27ca35f55b12120ad7980852aab16079399ddf94f3dec87c8deea The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackoo3m1u (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9409725a0c60e28d487058cfed06d57101ed7eb4fdf031e19ad43e72f2597d3c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstacks0fpdw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6fb53f068e1ac90904d145dae9a0e72a5e0c7030a419732819774a659bccd01 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackujfdgm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2410d34a77cd3d19e207d15edd8221ff5a49932ee4a6052fa30668b92e810b96 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack5vpco (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d7f6e539028bc60b1b035b1f56a075db641a49fb092fbf7f1ee859210925e99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackra0nf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fa155e83b3511cc75a912e4270efaebffd042193752afa423eb3819f4e6c1bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstack2cyinb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e160520778ca6e1c474aa74fb066efea18747c08d4efbafcc7ece8ae185f5b21 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackgqt6yc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c59714eecb0470fad815ea33918fb40a82d7d9e73da4be2cd14575961183d1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackdci73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a82c7c1f8ba34fecbc15f45466f7794403b94aab19378524b05c9fee83c92e10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstack9ma2d (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19f56ed19a408b179769ab113af64880f60ddb0ad671a983ecaab4fd804c61a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in waxed-slightly-weathered-cut-copper-stairs-3xt74ldh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 125aa8a7ecbe76dbb501f7fc47defca2480a50f4b7e38a7cdc848ff1c15b2994 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in desmos-graphing-l5t17nyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9ad99fa93d6470ff0e403af07ba26efa2a2c72dab859da20722eaa768d9d364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in desmos-graphing-w7am2h4f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a587a6a9d79a435737148758d763bbb316e529fac1e72eca1d57764886a442f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in classlink-csh3v6cf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4dac329ff5e34f65f8b47e3c1f6c0245bd2752fee6c0993b90f15b397c092ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in classlink-vulrfg00 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dce79d9f109ae4132ce031ad16decf56259c490c10880bcde7f6886e85f5bcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-3a1zujw0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5eafb9932b14de66aa15f9850f0b8ef19f5964c521886d08812c9d883f68016f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-ameyqv97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a475aa608722e5a021edae81a8e2b4848eb991b51a9b2dead74446bb6466ae8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...