@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-92960 via vm2 (>=3.0.0, <=3.11.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by unknown CVE via vm2 (>=3.0.0, <=3.11.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves: unknown CVE...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-47698 via vm2 (>=3.0.0, <=3.11.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-47698 via vm2 (>=3.0.0, <=3.11.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-47686 via vm2 (>=3.0.0, <=3.11.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-47686 via vm2 (>=3.0.0, <=3.11.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-47683 via vm2 (>=3.0.0, <=3.11.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-47683 via vm2 (>=3.0.0, <=3.11.5)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

0.app1 (1.0.52), 0.edsql (>=1.0.49, <=1.0.50) +29185 more potentially affected by CVE-2026-19693 via extract-zip (>=1.0.3, <=2.0.1)

extract-zip NPM version =1.0.3, =1.0.49, =1.0.49, =1.0.49, =1.0.51, =1.0.65 - 007putra-my-bot 1.1.1 - 0wcc9yywcywy 1.0.0 - 0wu8yw8by8cw 1.0.0 - 10bis-shufersal-automation 1.0.0 - 123-movies 1.0.0 - 16promax-monitor 1.0.0 - 192.168.0.172 4.6.1 - 20190403-utils 1.0.0 and more Source cves:...

0.extends.wechat (>=1.0.51, <=1.0.65), 007putra-my-bot (1.1.1) +17095 more potentially affected by CVE-2026-19693 via extract-zip (>=2.0.0, <=2.0.1)

extract-zip NPM version =2.0.0, =1.0.51, =1.0.0, =0.2.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.2 and more Source cves: CVE-2026-19693 Source advisory: OSV:GHSA-7PQW-9J4J-H8Q3...

@availhealth/bot-layer (0.1.4), @fuego-systems/core (>=0.1.8, <=0.4.1) +9 more potentially affected by CVE-2026-53728 via @medplum/core (>=5.0.0, <=5.1.5)

@medplum/core NPM version =5.0.0, =0.1.8, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.10, =5.1.5 Source cves: CVE-2026-53728 Source advisory: OSV:GHSA-M44R-7C5H-M6MJ...

a-gpt (>=0.1.0, <=0.4.0), a11ywatch_cli (>=0.0.16, <=0.10.15) +13686 more potentially affected by unknown CVE via h2 (>=0.1.26, <=0.3.27)

h2 CARGO version =0.1.26, =0.1.0, =0.0.16, =0.2.0, =0.1.0, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0-beta.4, =0.1.0, =0.2.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0258...

@rse/claudex (1.0.11) potentially affected by CVE-2026-73055 via shescape (3.0.1)

shescape NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on shescape and may be impacted: - @rse/claudex 1.0.11 Source cves: CVE-2026-73055 Source advisory: SNYK:JS-SHESCAPE-18855681...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.2) +6 more potentially affected by CVE-2026-73055 via shescape (>=2.1.0, <=2.1.14)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.5 Source cves: CVE-2026-73055 Source advisory: SNYK:JS-SHESCAPE-18855681...

@appweaver/core (>=1.0.0, <=1.6.1), @bryopsida/object-store (>=0.1.0, <=0.1.7) +11 more potentially affected by CVE-2026-18165 via @fastify/oauth2 (>=7.9.0, <=8.2.0)

@fastify/oauth2 NPM version =7.9.0, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.13.0, =1.4.30, =1.2.0, =0.0.14, =0.0.19 Source cves: CVE-2026-18165 Source advisory: SNYK:JS-FASTIFYOAUTH2-18902506...

@appweaver/core (>=1.0.8, <=1.6.1), @buildplease/apikit (>=1.0.0, <=1.0.1) +16 more potentially affected by CVE-2026-19474 via @fastify/multipart (>=10.0.0, <=10.1.0)

@fastify/multipart NPM version =10.0.0, =1.0.8, =1.0.0, =4.0.1, =5.3.0, =0.0.17, =2.5.0, =2.2.1, =20260128.2248.28, =20260411.1248.30, =20260828.1636.54, =1.0.1, =0.11.0, =0.0.0-unstable.9f53ea597d, =6.5.0-beta.4 and more Source cves: CVE-2026-19474 Source advisory: SNYK:JS-FASTIFYMULTIPART-18853...

@appweaver/core (>=1.0.8, <=1.6.1), @buildplease/apikit (>=1.0.0, <=1.0.1) +16 more potentially affected by CVE-2026-18549 via @fastify/multipart (>=10.0.0, <=10.1.0)

@fastify/multipart NPM version =10.0.0, =1.0.8, =1.0.0, =4.0.1, =5.3.0, =0.0.17, =2.5.0, =2.2.1, =20260128.2248.28, =20260411.1248.30, =20260828.1636.54, =1.0.1, =0.11.0, =0.0.0-unstable.9f53ea597d, =6.5.0-beta.4 and more Source cves: CVE-2026-18549 Source advisory: SNYK:JS-FASTIFYMULTIPART-18853...

avml (>=0.4.1, <=0.6.1), azure_data_cosmos (0.1.0) +241 more potentially affected by unknown CVE via azure_core (0.1.1)

azurecore CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on azurecore and may be impacted: - avml =0.4.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0 and more Source cves: unknown CVE Source advisory:...

avml (>=0.7.0, <=0.8.0), azeventhubs (>=0.1.0, <=0.19.4) +335 more potentially affected by unknown CVE via azure_core (>=0.2.2, <=0.21.0)

azurecore CARGO version =0.2.2, =0.7.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.1.0, =0.2.0, =0.3.0, =0.3.0, =0.3.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.21.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0275...

Malicious code in eslint-generate-prerelease (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b3f1a7acd55a1642c9615fe72871781a6c0d6bea6f9d31aa42c700aa799704 Package ships an empty module index.js = 'module.exports = ;' under a name that resembles internal tooling, published at an inflated version 99.9.1 —...