MAL-2026-14062 Malicious code in tw-pkgprobe-7731 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12551ba52a9605fc8ce1e13b750671d201dcf2a6e23d03f5a23b15236f2fa49b On preinstall/postinstall, probe.js checks whether cwd matches a Twilio Serverless build path /tmp/AC/ and, if so, copies daemon.js to...

Malicious code in tw-pkgprobe-7731 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12551ba52a9605fc8ce1e13b750671d201dcf2a6e23d03f5a23b15236f2fa49b On preinstall/postinstall, probe.js checks whether cwd matches a Twilio Serverless build path /tmp/AC/ and, if so, copies daemon.js to...

GO-2025-3816 vulnerabilities

Vulnerabilities for packages: cg, chainctl, tw...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: ocm-cli-fips, conftest, xeol-fips, kyverno-fips, headlamp, argocd-image-updater, cluster-api-helm-controller-fips, rancher-fleet, cilium-cli, headlamp-fips, argo-cd, falcoctl-fips, falcoctl, ratify, ocm-kubernetes-controller, xeol, trivy, drone, helm-set-status,...

GO-2025-3816 vulnerabilities

Vulnerabilities for packages: tw...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: k9s, kots, cilium-cli, zarf, chart-testing, kubescape, tw, eksctl, helm-operator, pluto, flux-helm-controller, helm-push, zot, cluster-api-helm-controller, cert-manager-cmctl, rancher-helm, trivy, flux-source-controller, helm-docs, chartmuseum, k8ssandra-client, flux...

GO-2025-3601 vulnerabilities

Vulnerabilities for packages: k9s, kots, cilium-cli, zarf, chart-testing, kubescape, tw, eksctl, helm-operator, pluto, flux-helm-controller, helm-push, zot, cluster-api-helm-controller, cert-manager-cmctl, rancher-helm, trivy, flux-source-controller, helm-docs, chartmuseum, k8ssandra-client, flux...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: k9s, kots, cilium-cli, envoy-gateway, cerbos, zarf, k8sgpt, chart-testing, linkerd2, rancher-fleet, tw, eksctl, helm-operator, pluto, flux-helm-controller, kargo, helm-push, zot, istio, cluster-api-helm-controller, cert-manager-cmctl, rancher-helm, trivy,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: k9s, cilium, argo-cd, crossplane-provider-aws-cloudformation, telegraf, kots, chisel, cilium-cli, k8sgpt, gptscript, pulumi-language-dotnet, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-route53, splunk-otel-collector, fscrypt, go-discover, aactl,...

MAL-2026-6508 Malicious code in tw-style-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc430da42cdbbb83b681be645a2bbc3f3f2a48e0e19d9d3624b4b3e6f9aa7e92 [email protected] was scanned and produced no findings indicative of supply-chain attack behavior. No install-time lifecycle scripts performing...

Malicious code in tw-style-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc430da42cdbbb83b681be645a2bbc3f3f2a48e0e19d9d3624b4b3e6f9aa7e92 [email protected] was scanned and produced no findings indicative of supply-chain attack behavior. No install-time lifecycle scripts performing...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: openbao, ld-relay, seaweedfs-rocksdb, crossplane-provider-aws-rds-fips, flyte, newrelic-k8s-metrics-adapter-fips, aws-node-termination-handler-fips, db-operator, grafana-pyroscope-fips, crossplane-provider-aws-scheduler, spegel-fips, openbao-fips,...

MAL-2026-5935 Malicious code in tw-theme-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0144b9ea6743e481e49885f6375a8aa990e9a20bfc5da1148b7df59a9370736c The published entrypoints dist/index.cjs and dist/runtime.cjs contain an injected IIFE that assigns global.r = require and global.m = module, tags th...

Malicious code in tw-fluid-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3bc3497d6c683f52210ca201500d27cf9e2bcccd976883be2ed85d17569b54 The package advertises itself as a Tailwind CSS fluid-type plugin but ships src/utils/lib.min.js, which is loaded as a side effect when the package's...

Malicious Package

Overview tw-fluid-type is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-5638 Malicious code in tw-fluid-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3bc3497d6c683f52210ca201500d27cf9e2bcccd976883be2ed85d17569b54 The package advertises itself as a Tailwind CSS fluid-type plugin but ships src/utils/lib.min.js, which is loaded as a side effect when the package's...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: fixed a use-after-free in twtimerhandler A real-world panic issue was discovered in Linux 5.4. The details of the issue are as follows: - Bug: Unable to handle a page fault for the address: ffffde49a863de28 - Memory layout:...

Malicious Package

Overview @tw-marionette/clipboard is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @tw-models/storage is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @tw-utils/static is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...