MAL-2026-173 Malicious code in cng-web-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018fca29734b6580902f0808df01db408d09cb6704720e6cac215827f5812f75 The package cng-web-lib was found to contain malicious code. Source: ghsa-malware ea72356f6a1b185aea027fcf291bdb55d1a3f4e6ae715b68e42c5e33834a28d9 An...

Malicious code in jsonify-setting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8183b50e15a97c7409271a1f226a25472121ef2ff9abbd954ba9693ba63c6f6e The package jsonify-setting was found to contain malicious code. Source: ghsa-malware d31a9557fd6798ea1a21705b70127ad9840b9f527f34ed29161e68230fd1a86...

MAL-2026-161 Malicious code in jsonify-setting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8183b50e15a97c7409271a1f226a25472121ef2ff9abbd954ba9693ba63c6f6e The package jsonify-setting was found to contain malicious code. Source: ghsa-malware d31a9557fd6798ea1a21705b70127ad9840b9f527f34ed29161e68230fd1a86...

Malicious code in shaktihacker2026 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cb6457a3349374a4197b81f898e8188fd1fa57b63d5d1585e4f06ddca09316 The package shaktihacker2026 was found to contain malicious code. Source: ghsa-malware 8576dcfc2ee1fd97abb2cb2200663eea4537f4a39053e01984a915f8b570d2...

Malicious code in ncodeauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00fcaac77b28bc2ce7fd09837de2d46fd48c6bd32d11d39a98e2450d754843f The package ncodeauth was found to contain malicious code. Source: ghsa-malware 844237bb9b9aab92cf332246dacc9675c295acc85e6f914b9b9da957f04f7490 Any...

MAL-2026-154 Malicious code in ncodeauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00fcaac77b28bc2ce7fd09837de2d46fd48c6bd32d11d39a98e2450d754843f The package ncodeauth was found to contain malicious code. Source: ghsa-malware 844237bb9b9aab92cf332246dacc9675c295acc85e6f914b9b9da957f04f7490 Any...

Malicious code in hoppscotch-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc9fa1661ed3de2ac221307d7e5cac1aea785ac1d0e2241ecd0001a05fea796 The package hoppscotch-agent was found to contain malicious code. Source: ghsa-malware 7c2ae92a02c69aaa3b5287d2172d0fbc6f8f1e3ae51c69f76c7a07e4dcc7a1...

MAL-2026-149 Malicious code in bnia-work (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f78b12fa102dbd32d8d3a27c016f7b790124a3a73bdf1970768799e120183c30 The package bnia-work was found to contain malicious code. Source: ghsa-malware 2583fa3177342feb8975727c7ad5873d1a1e7bea2ce3ce445343aaa9a0b3459b Any...

Malicious code in awsm-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a8778a330765a0a4f5b15960d7bba1cf4ea76946cd4395eb239af31c497330 The package awsm-core was found to contain malicious code. Source: ghsa-malware ba13f4a6fbc556808377c1e17e991b77feb5d2d08af58861be6460732cfc3d9e Any...

Malicious code in rt-long-form-content (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aafc418ec6a49447f89597e76416b14a45ffa82d65fb393dc3bb91d1fca38ac The package rt-long-form-content was found to contain malicious code. Source: ghsa-malware...

Malicious code in language-capirca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd955d0634b6bcda38eae58473a0e1bf135cde9c2036c680ee490ef1c4ba698 The package language-capirca was found to contain malicious code. Source: ghsa-malware 2a357e83ec0c25df41c3b48d19bcd056e7faf888bfc0a5d148ab30ac7f8884...

Malicious code in spark-ar-dynamic-mocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e041fd0dd06edcd5beedc3297cfb4326de3cb34e6e854601de47b872b93f9b24 The package spark-ar-dynamic-mocks was found to contain malicious code. Source: ghsa-malware...

Malicious code in rt-text-media-grid-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f688a9034313f7d48c41ada2e48af7bd425c27af69a13fb41f5ba38c5eca66de The package rt-text-media-grid-collection was found to contain malicious code. Source: ghsa-malware...

MAL-2026-145 Malicious code in spark-ar-core-libs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1285c72e9b251b778e8914d717f3408a94460a9f9aca70a65945e4c510c5651f The package spark-ar-core-libs was found to contain malicious code. Source: ghsa-malware...

MAL-2026-138 Malicious code in rt-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843ded25c4705270d68a2528b9a2aadd0755998b2880686a4ea7ad2d777a1235 The package rt-footer was found to contain malicious code. Source: ghsa-malware d3f499cb715f4d755c0be8690d154c1da2a95c1195bff56c58d5967d2b680e6e Any...

MAL-2026-148 Malicious code in tailwind-autoanimation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239c7b556685c76e1b25bf8ec701e0688ec975920ddc409d56365b6c38b30edc The package tailwind-autoanimation was found to contain malicious code. Source: ghsa-malware...

Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full Control

Cybersecurity researchers have disclosed details of yet another maximum-severity security flaw in n8n, a popular workflow automation platform, that allows an unauthenticated remote attacker to gain complete control over susceptible instances. The vulnerability, tracked as CVE-2026-21858 CVSS scor...

CVE-2019-16920

Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a "PingTest" device common gateway interface that could lead to common injection. An attacker who successfully triggers...

CVE-2019-12185

eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component. This may result in remote command execution. An attacker can use a user account to fully compromise the system using a POST request. This will allow for PHP files to be written to the we...

CVE-2024-2195

A critical Remote Code Execution RCE vulnerability was identified in the aimhubio/aim project, specifically within the /api/runs/search/run/ endpoint, affecting versions = 3.0.0. The vulnerability resides in the runsearchapi function of the aim/web/api/runs/views.py file, where improper restricti...