MAL-2026-14062 Malicious code in tw-pkgprobe-7731 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12551ba52a9605fc8ce1e13b750671d201dcf2a6e23d03f5a23b15236f2fa49b On preinstall/postinstall, probe.js checks whether cwd matches a Twilio Serverless build path /tmp/AC/ and, if so, copies daemon.js to...

Malicious code in tw-pkgprobe-7731 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12551ba52a9605fc8ce1e13b750671d201dcf2a6e23d03f5a23b15236f2fa49b On preinstall/postinstall, probe.js checks whether cwd matches a Twilio Serverless build path /tmp/AC/ and, if so, copies daemon.js to...

GO-2025-3816 vulnerabilities

Vulnerabilities for packages: tw, chainctl, cg...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: cilium-cli, chartmuseum, helm-set-status, helm-exporter-fips, kubescape-operator-fips, helm-mapkubeapis, conftest-fips, k8ssandra-client-fips, rancher, zarf-fips, ocm-kubernetes-controller-fips, helm-exporter, conftest, jfrog-cli, envoy-gateway-fips, consul-k8s, karg...

GO-2025-3816 vulnerabilities

Vulnerabilities for packages: tw...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, helm-operator, cert-manager-cmctl, helm-docs, tw, helm-push, k8ssandra-client, zot, eksctl, kubescape, zarf, k9s, flux-helm-controller, flux-source-controller, flux, trivy, chart-testing, chartmuseum, kots, pluto, cilium-cli, rancher-helm...

GO-2025-3601 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, helm-operator, cert-manager-cmctl, helm-docs, tw, helm-push, k8ssandra-client, zot, eksctl, kubescape, zarf, k9s, flux-helm-controller, flux-source-controller, flux, trivy, chart-testing, chartmuseum, kots, pluto, cilium-cli, rancher-helm...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, envoy-gateway, helm-operator, cert-manager-cmctl, kargo, istio, helm-docs, tw, helm-push, k8ssandra-client, zot, eksctl, rancher-fleet, k8sgpt, zarf, k9s, linkerd2, flux-helm-controller, flux-source-controller, trivy, chart-testing,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: act, helm, cosign, wolfictl, crossplane-provider-aws-firehose, splunk-otel-collector, argo-cd, kargo, gitea, docker-machine-driver-linode, terraform-provider-acme, rootlesskit, docker-cli-buildx, flux-notification-controller, openbao, buildkitd, cloud-provider-aws,...

MAL-2026-6508 Malicious code in tw-style-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc430da42cdbbb83b681be645a2bbc3f3f2a48e0e19d9d3624b4b3e6f9aa7e92 [email protected] was scanned and produced no findings indicative of supply-chain attack behavior. No install-time lifecycle scripts performing...

Malicious code in tw-style-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc430da42cdbbb83b681be645a2bbc3f3f2a48e0e19d9d3624b4b3e6f9aa7e92 [email protected] was scanned and produced no findings indicative of supply-chain attack behavior. No install-time lifecycle scripts performing...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: hubble-fips, chartmuseum, k8s-agents-operator, datadog-agent-fips, docker-fips, crossplane-provider-aws-elasticsearch-fips, vault-fips, cloudflared-fips, docker-machine-driver-harvester, rancher, kubernetes-csi-node-driver-registrar, cloud-provider-azure-fips,...

MAL-2026-5935 Malicious code in tw-theme-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0144b9ea6743e481e49885f6375a8aa990e9a20bfc5da1148b7df59a9370736c The published entrypoints dist/index.cjs and dist/runtime.cjs contain an injected IIFE that assigns global.r = require and global.m = module, tags th...

Malicious code in tw-theme-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0144b9ea6743e481e49885f6375a8aa990e9a20bfc5da1148b7df59a9370736c The published entrypoints dist/index.cjs and dist/runtime.cjs contain an injected IIFE that assigns global.r = require and global.m = module, tags th...

Malicious code in tw-fluid-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3bc3497d6c683f52210ca201500d27cf9e2bcccd976883be2ed85d17569b54 The package advertises itself as a Tailwind CSS fluid-type plugin but ships src/utils/lib.min.js, which is loaded as a side effect when the package's...

Malicious Package

Overview tw-fluid-type is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-5638 Malicious code in tw-fluid-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3bc3497d6c683f52210ca201500d27cf9e2bcccd976883be2ed85d17569b54 The package advertises itself as a Tailwind CSS fluid-type plugin but ships src/utils/lib.min.js, which is loaded as a side effect when the package's...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: fixed a use-after-free in twtimerhandler A real-world panic issue was discovered in Linux 5.4. The details of the issue are as follows: - Bug: Unable to handle a page fault for the address: ffffde49a863de28 - Memory layout:...

Malicious Package

Overview @tw-models/storage is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @tw-marionette/clipboard is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...