189 matches found
ROOT-APP-NPM-CVE-2025-68429 CVE-2025-68429 in storybook - Patched by Root
Root has patched CVE-2025-68429 in the storybook package for Root:npm. Multiple fixed versions available...
Malicious code in heft-storybook-v6-react-tutorial-storykit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb5955868f72344703128add3301e3a85b51773de502f24e636fe0b9bba86d42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dolyame-ui-storybook-menu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0df8669e15c61895263cb0fc334c38027fe01b749646c3d3f74baee35684cb1 The package's main entry index.js unconditionally requires ext.js, which on module load selects a platform-specific asset, fetches an opaque binary...
MAL-2026-13186 Malicious code in dolyame-ui-storybook-menu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0df8669e15c61895263cb0fc334c38027fe01b749646c3d3f74baee35684cb1 The package's main entry index.js unconditionally requires ext.js, which on module load selects a platform-specific asset, fetches an opaque binary...
MAL-2026-12826 Malicious code in beaver-ui-storybook-addon-code-description (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8105d085fbf1a6ec1018ac850555ec02e022725ce198f54ac291133b847d9db On require of the package main, loader.js selects an OS-specific endpoint, downloads a binary via https.get from one of several hardcoded Cloudflare...
Malicious code in beaver-ui-storybook-addon-code-description (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8105d085fbf1a6ec1018ac850555ec02e022725ce198f54ac291133b847d9db On require of the package main, loader.js selects an OS-specific endpoint, downloads a binary via https.get from one of several hardcoded Cloudflare...
MAL-2026-13086 Malicious code in boxy-storybook-addon-changelog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec351f143fde732be84b60d329ba254cda918df3ebb25882371a8c5d96a3dd0 On require of the package, index.js loads ext.js which downloads an opaque platform-specific binary from one of four hardcoded Cloudflare Workers hos...
Malicious code in checkout-storybook-default (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844d8b490d431f2fad501a06bbcf924fe5890ba16c92157dd52488c1908f7909 On require of the package, index.js loads polyfill.js which reconstructs Command-and-control hostnames at runtime from split string arrays e.g...
MAL-2026-12681 Malicious code in delivery-ci-storybook (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f7c5d9585ed160843f93122a7c6f3bda50165c4118618ad7aac0bd1b302069 On require of delivery-ci-storybook, index.js loads bridge.js which downloads a platform-specific executable from one of three anonymous Cloudflare...
Malicious code in afisha-storybook-default (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feeb75800892fc0387942008f2de2a7fe3c9088df88d596afc7e3d1466262c13 On require of the package, index.js loads setup.js which invokes lib/telemetry.js's runtime.run with a list of obfuscated mirror hosts...
MAL-2026-12336 Malicious code in afisha-storybook-default (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feeb75800892fc0387942008f2de2a7fe3c9088df88d596afc7e3d1466262c13 On require of the package, index.js loads setup.js which invokes lib/telemetry.js's runtime.run with a list of obfuscated mirror hosts...
Malicious code in @ornikar/storybook-config (npm)
npm/@ornikar/storybook-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11777 Malicious code in @ornikar/storybook-config (npm)
npm/@ornikar/storybook-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
CLSA-2026-1785380885 TuxCare security update for storybook (2 CVEs)
TuxCare rebuilt storybook to address 2 CVEs. Fixed in 10.1.9-tuxcare.1...
PT-2026-75836
TuxCare rebuilt storybook to address 2 CVEs. Fixed in 10.1.9-tuxcare.1...
ROOT-APP-NPM-CVE-2026-27148 CVE-2026-27148 in @rootio/storybook - Patched by Root
Root has patched CVE-2026-27148 in the @rootio/storybook package for Root:npm. Multiple fixed versions available...
Malicious code in elf-stats-storybook-snowman-513 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in elf-stats-storybook-workshop-935 (npm)
--- -= Per source details. Do not edit below this line.=-...