@cabloy/quasar-app-vite (>=2.4.0, <=2.5.10), @deepnotes/quasar-app-vite (>=2.0.0-alpha.2, <=2.0.0-alpha.42) +20 more potentially affected by CVE-2026-106106 via @quasar/render-ssr-error (1.0.4)

@quasar/render-ssr-error NPM version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on @quasar/render-ssr-error and may be impacted: - @cabloy/quasar-app-vite =2.4.0, =2.0.0-alpha.2, =0.2.3, =0.1.9, =0.0.110, =0.0.50, =3.0.1, =3.0.9, =1.3.0, =3.9.0...

EUVD-2025-11980

Malicious code in bioql PyPI...