Malicious code in minify-mangle-names (npm)

The package 'minify-mangle-names' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...

MAL-2026-1550 Malicious code in syntax-export-extensions (npm)

The package 'syntax-export-extensions' is part of the PhantomRaven supply chain attack campaign Wave 3. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...

MAL-2026-1554 Malicious code in typescript-validation-schema (npm)

The package 'typescript-validation-schema' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...

MAL-2026-1526 Malicious code in prefer-let (npm)

The package 'prefer-let' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server npm.jpartifacts.com...

GHSA-P3CX-FRRM-35M8 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-kas...

CVE-2026-3922 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3938 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3940 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3920 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3923 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3935 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-G9F5-PWQF-9XC6 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3919 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3914 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-82W6-2JQH-PVW5 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-FRGX-W57M-9M62 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3921 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3942 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-2920

GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

CVE-2026-2920 GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...