MAL-2026-65 Malicious code in oj-sp-messages-banner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2997bc3258b7333abbb7c3aa047917498aee227c667e865c51102062bc82916e The package oj-sp-messages-banner was found to contain malicious code. Source: ghsa-malware...

MAL-2026-60 Malicious code in oj-sp-about-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88af67380622acfe95b416c0349a87adf700798459b1b7794578e38d057a2bf6 The package oj-sp-about-page was found to contain malicious code. Source: ghsa-malware 4bece5a0063e69e6b490afd2ca5d92fce9ce26e5c729f5f550f9acca50eb10...

Malicious code in @vietmoney/react-native-smart-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7789664c2f8f3999c2d9294a538cac5a4ae536b37159d9246a6aa2ac4e2c0b3f The package @vietmoney/react-native-smart-page was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vietmoney/react-native-image-transformer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d6e41bb857d4ed96776b54551e25a97efccd98d763659d945f9c969c7981cf The package @vietmoney/react-native-image-transformer was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vietmoney/react-native-action-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1a9f2c1ef7c8dd8ece133048315f8ab738a4d5d8bf1a11dbe5f932d39e2eca The package @vietmoney/react-native-action-button was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192996 Malicious code in @vietmoney/react-native-htmlview (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82606664e32d7050a729171d5dac24f54950e90b7259a7f90a582e94632fcc61 The package @vietmoney/react-native-htmlview was found to contain malicious code. Source: ghsa-malware...

MAL-2025-193003 Malicious code in @vietmoney/vietmoneywork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59799baf7b8c7f94f2f2f6f4a87cfa9efbb6c8e4f480d2d234ed88264f6aed6b The package @vietmoney/vietmoneywork was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vietmoney/vietmoneywork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59799baf7b8c7f94f2f2f6f4a87cfa9efbb6c8e4f480d2d234ed88264f6aed6b The package @vietmoney/vietmoneywork was found to contain malicious code. Source: ghsa-malware...

MAL-2025-193000 Malicious code in @vietmoney/react-native-tags-input (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eaba1a91c6cb85d46db01b9c4e96157cdeb905c8c7d1b0d6b3dbd507a58f402 The package @vietmoney/react-native-tags-input was found to contain malicious code. Source: ghsa-malware...

Malicious code in error-fallback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bcddff3dd9b13e5fc8e37afd8432e9485d1204cb5cd6a546a46e4580371f929 The package error-fallback was found to contain malicious code. Source: ghsa-malware b9c747aad11a6b98fa9f2fb07cb9410f6bc4e51390f358f1ff5d546c14b08134...

MAL-2025-192971 Malicious code in react-devtools-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c07bb5eb2fa7f96705fece940955413b3976968c5a79e13bdd85ce00ec485e4 The package react-devtools-extensions was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-dom-bindings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c021e2818d17945e50bcb89d19d34a8750ca14078220d113dc8b4c5f0c1392 The package react-dom-bindings was found to contain malicious code. Source: ghsa-malware...

Malicious code in cdd-plugin-for-datawarrior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab7ca6ae4de6f4b1898f1507f69f89459ab40983852692e28a6b599f9e2318f The package cdd-plugin-for-datawarrior was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192974 Malicious code in rt-interactive-card-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9858817ec5f5e5af9db5f5033c3626e4214faa07e1169e950573bbca309a975e The package rt-interactive-card-collection was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192964 Malicious code in @peter_wilson12091/internal-json-test-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18430304f650bf998b2421e45c0b8b01fce58239d3dd6fbe9de753128aac9a4d The package @peterwilson12091/internal-json-test-parser was found to contain malicious code. Source: ghsa-malware...

Malicious code in @bugdtest/test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566749f80686d2357340c2b5168e4bcfa5325ef16ac486be884d76778a25b5c3 The package @bugdtest/test1 was found to contain malicious code. Source: ghsa-malware d0f199c82abe08a5f5512596124dac3897cfaf75367ba53fb532f76e23474cb...

EUVD-2025-205290

A vulnerability was found in BlueChi, a multi-node systemd service controller used in RHIVOS. This flaw allows a user with root privileges on a managed node qm to create or override systemd service unit files that affect the host node. This issue can lead to privilege escalation, unauthorized...

EUVD-2025-204994

Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Soda PDF Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system...

Malicious code in @google_recaptcha/js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0346120a6f0d866aebe59ca9ae06c02e28849fc3840a412edcc81a2ab54ded The package @googlerecaptcha/js was found to contain malicious code. Source: ghsa-malware...

Malicious code in supply_chain_dummy_test_4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44714fb556ca073c6056617d8f13043c9fc07b19dd6b1c6599b62dc183c87a45 The package supplychaindummytest4 was found to contain malicious code. Source: ghsa-malware...