@whalent/agent (0.3.288) potentially affected by unknown CVE via @whalent/agent-core (0.3.288)

@whalent/agent-core NPM version 0.3.288 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.288 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.289) potentially affected by unknown CVE via @whalent/agent-core (0.3.289)

@whalent/agent-core NPM version 0.3.289 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.289 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.291) potentially affected by unknown CVE via @whalent/agent-core (0.3.291)

@whalent/agent-core NPM version 0.3.291 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.291 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.294) potentially affected by unknown CVE via @whalent/agent-core (0.3.294)

@whalent/agent-core NPM version 0.3.294 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.294 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.295) potentially affected by unknown CVE via @whalent/agent-core (0.3.295)

@whalent/agent-core NPM version 0.3.295 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.295 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.297) potentially affected by unknown CVE via @whalent/agent-core (0.3.297)

@whalent/agent-core NPM version 0.3.297 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.297 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

@whalent/agent (0.3.298) potentially affected by unknown CVE via @whalent/agent-core (0.3.298)

@whalent/agent-core NPM version 0.3.298 is affected by a known vulnerability. The following packages have a transitive dependency on @whalent/agent-core and may be impacted: - @whalent/agent 0.3.298 Source cves: unknown CVE Source advisory: OSV:MAL-2026-10722...

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

In this article 1. Attack chain overview 2. How the attack started: GitHub Actions pwn request 3. Mitigation and protection guidance 4. Learn more On July 14, 2026, Microsoft Threat Intelligence identified a coordinated supply chain compromise of the @asyncapi npm organization, a widely used set ...

7ghost-cli (>=1.17.6-next.0, <=1.18.4), @agentuity/hono (>=3.0.0-alpha.0, <=3.0.0-beta.4) +424 more potentially affected by CVE-2026-50289 via systeminformation (>=5.0.6, <=5.31.6)

systeminformation NPM version =5.0.6, =1.17.6-next.0, =3.0.0-alpha.0, =0.0.6, =0.0.63, =0.0.2, =3.0.0-alpha.0, =0.26.4, =0.1.1, =0.1.1, =4.1.0-rc.4, =5.2.0-revision.1, =4.0.0-devnet.2-patch.0, =0.0.1-2.1-beta-provision, =4.260426.2, =4.260510.3 and more Source cves: CVE-2026-50289 Source advisory...

7ghost-cli (>=1.17.6-next.0, <=1.18.4), @agentuity/hono (>=3.0.0-alpha.0, <=3.0.0-beta.4) +424 more potentially affected by CVE-2026-50289 via systeminformation (>=5.0.6, <=5.31.6)

systeminformation NPM version =5.0.6, =1.17.6-next.0, =3.0.0-alpha.0, =0.0.6, =0.0.63, =0.0.2, =3.0.0-alpha.0, =0.26.4, =0.1.1, =0.1.1, =4.1.0-rc.4, =5.2.0-revision.1, =4.0.0-devnet.2-patch.0, =0.0.1-2.1-beta-provision, =4.260426.2, =4.260510.3 and more Source cves: CVE-2026-50289 Source advisory...

@budibase/backend-core (>=2.15.0, <=3.39.22), @budibase/cli (>=2.0.0, <=3.2.26) +10 more potentially affected by CVE-2026-50272 via dd-trace (>=5.0.0, <=5.98.0)

dd-trace NPM version =5.0.0, =2.15.0, =2.0.0, =2.15.0, =2.0.0, =2.0.0, =1.4.0, =1.11.0, =0.1.0-build.1.838647, =0.37.19, =0.37.5, =0.39.0 Source cves: CVE-2026-50272 Source advisory: OSV:GHSA-WXQQ-GCQ8-C443...

actix-prost (>=0.1.0, <=0.4.0), adns-server (>=0.1.0, <=0.3.0) +1308 more potentially affected by unknown CVE via serde_with (>=2.3.3, <=3.14.1)

serdewith CARGO version =2.3.3, =0.1.0, =0.1.0, =0.1.0, =0.40.23-1, =0.1.5, =0.4.0, =0.0.1, =1.0.0, =0.0.7, =0.1.1, =0.1.1, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7GCF-G7XR-8HXJ...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 3d-crystal-model (0.1.0) +3504 more potentially affected by CVE-2026-54490 via websocket-driver (>=0.3.5, <=0.7.4)

websocket-driver NPM version =0.3.5, =1.0.1, =0.1.2, =1.0.8, =0.1.0, =0.1.21, =1.0.0, =1.0.5, =0.2.0, =3.4.1, =0.1.1, =0.1.272 - @themis/usescheme 1.1.4 - @ab-task/react-tool-belt 0.1.1 and more Source cves: CVE-2026-54490 Source advisory: SNYK:JS-WEBSOCKETDRIVER-17987674...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 3d-crystal-model (0.1.0) +3504 more potentially affected by CVE-2026-54490 via websocket-driver (>=0.3.5, <=0.7.4)

websocket-driver NPM version =0.3.5, =1.0.1, =0.1.2, =1.0.8, =0.1.0, =0.1.21, =1.0.0, =1.0.5, =0.2.0, =3.4.1, =0.1.1, =0.1.272 - @themis/usescheme 1.1.4 - @ab-task/react-tool-belt 0.1.1 and more Source cves: CVE-2026-54490 Source advisory: OSV:GHSA-MP7J-QC5W-4988...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 3d-crystal-model (0.1.0) +3504 more potentially affected by CVE-2026-54466 via websocket-driver (>=0.3.5, <=0.7.4)

websocket-driver NPM version =0.3.5, =1.0.1, =0.1.2, =1.0.8, =0.1.0, =0.1.21, =1.0.0, =1.0.5, =0.2.0, =3.4.1, =0.1.1, =0.1.272 - @themis/usescheme 1.1.4 - @ab-task/react-tool-belt 0.1.1 and more Source cves: CVE-2026-54466 Source advisory: OSV:GHSA-XV26-6W52-CPH6...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 3d-crystal-model (0.1.0) +3504 more potentially affected by CVE-2026-54466 via websocket-driver (>=0.3.5, <=0.7.4)

websocket-driver NPM version =0.3.5, =1.0.1, =0.1.2, =1.0.8, =0.1.0, =0.1.21, =1.0.0, =1.0.5, =0.2.0, =3.4.1, =0.1.1, =0.1.272 - @themis/usescheme 1.1.4 - @ab-task/react-tool-belt 0.1.1 and more Source cves: CVE-2026-54466 Source advisory: SNYK:JS-WEBSOCKETDRIVER-17987994...

@inkeep/agents-core (>=0.0.0-dev-20260106221934, <=0.41.0), @inkeep/ai-sdk-provider (>=0.0.0-dev-20260106221934, <=0.41.0) +10 more potentially affected by CVE-2026-53515 via @better-auth/sso (>=1.3.28, <=1.6.9)

@better-auth/sso NPM version =1.3.28, =0.0.0-dev-20260106221934, =0.0.0-dev-20260106221934, =0.0.0-dev-20260106221934, =7.5.0-canary.1, =7.5.0-canary.1, =1.0.0, =0.1.0, =0.1.0, =1.3.0, =3.1.2, =0.8.13, =0.9.0 Source cves: CVE-2026-53515 Source advisory: SNYK:JS-BETTERAUTHSSO-18016335...

-fides-amor-et-lux (1.0.0), -price-checker (>=1.0.0, <=1.0.5) +52533 more potentially affected by CVE-2026-62389 via ws (>=8.0.0, <=8.21.0)

ws NPM version =8.0.0, =1.0.0, =1.0.0, =1.1.0, =0.1.0-rc.7, =0.1.0, =1.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-62389 Source advisory: SNYK:JS-WS-17988732...

@n8n/ai-node-sdk (0.18.0), @n8n/ai-utilities (0.21.0) +16 more potentially affected by CVE-2026-59259 via n8n-workflow (2.28.0)

n8n-workflow NPM version 2.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-workflow and may be impacted: - @n8n/ai-node-sdk 0.18.0 - @n8n/ai-utilities 0.21.0 - @n8n/ai-workflow-builder 1.28.0 - @n8n/api-types 1.28.0 - @n8n/backend-common 1.28....

@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @henry2323/n8n-nodes-calendar-tool-wrapper (0.1.4) +38 more potentially affected by CVE-2026-59259 via n8n-core (>=1.0.0, <=1.122.34)

n8n-core NPM version =1.0.0, =0.2.0, =1.0.1, =0.26.0, =0.34.0, =1.0.1, =0.21.8, =1.0.0, =1.0.0, =0.1.0, =1.0.1, =0.3.3, =0.1.3, =0.1.1, =1.2.0, =1.4.1 and more Source cves: CVE-2026-59259 Source advisory: SNYK:JS-N8NCORE-18017737...