GO-2025-3770 vulnerabilities

Vulnerabilities for packages: caddy, karma, rclone, cloudflared, sftpgo, step, step-issuer, buf, kyverno-policy-reporter-ui, gogatekeeper, tkn, gitness, step-ca...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kubescape-operator, knative-eventing, tetragon, rekor, crossplane-provider-family-azure, crossplane-provider-aws-route53, rancher-fleet, sftpgo-plugin-auth, omnibump, crossplane-provider-aws-rds, continuity, promxy, container-object-storage-interface,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: git-lfs, cert-manager-istio-csr, dex, kubescape-operator, tetragon, kine, sftpgo-plugin-auth, postgres-operator, crossplane-provider-aws-rds, yunikorn-k8shim, container-object-storage-interface, kubernetes-csi-external-attacher, kapp, cert-manager-cmctl, gatus,...

Foxit PDF Editor < 13.2.6 / 14.0.6 / 2026.1.3 Vulnerability

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 2026.1.3/14.0.6/13.2.6. It is, therefore affected by vulnerability: - Foxit PDF Editor/Reader inconsistently alerts users when signature fields are...

Foxit PDF Reader < 2026.1.3 Vulnerability

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 2026.1.3. It is, therefore affected by vulnerability: - Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified,...

Oracle Enterprise Manager Base Platform Unauthorized Access

The vulnerability of the UI Framework component of the Oracle Enterprise Manager Base Platform is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to gain unauthorized access to read, modify, or delete data, as well as cause service failures usin...

MAL-2026-13968 Malicious code in @hzero-front-ui/cfg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d280060b3d704c67c4a2cc853fde425220e6a3606f71269daa8a9b3e74052f6d package.json declares preinstall and install lifecycle scripts that, on npm install, collect whoami, hostname, current working directory, and...

MAL-2026-13967 Malicious code in @hzero-front-ui/c7n-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 836c7ea4bdd57db38273e1e017c5a977d397cf321d36e5dbdd8060fbcd8ca08e Package @hzero-front-ui/[email protected] is an empty library whose only functional code runs in preinstall and install lifecycle hooks in package.json...

MAL-2026-13969 Malicious code in @hzero-front-ui/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7821a8d1a76ccfc9b3e0649ad6b600927c9c3448ee083d47809026588daa77ca Package @hzero-front-ui/[email protected] is a hollow shell index.js is only module.exports = ; whose sole functional content is preinstall/install...

Malicious code in @hzero-front-ui/hzero-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1b33c04eb2fb12d521b76353993517475d9239c9790c085d16c0c3d0a4ba2f9 Package @hzero-front-ui/[email protected] is a scope-lookalike of @hzero-front/hzero-ui with a placeholder version, empty author, generic description...

Malicious code in @hzero-front-ui/themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac0df9dcfaeaf0958ef981d9c5cd9dd4ab1fe0de41bd20894c261dade6bb486 package.json defines preinstall and install lifecycle scripts that run automatically on npm install. The scripts collect the installer's whoami,...

MAL-2026-13971 Malicious code in @hzero-front-ui/themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac0df9dcfaeaf0958ef981d9c5cd9dd4ab1fe0de41bd20894c261dade6bb486 package.json defines preinstall and install lifecycle scripts that run automatically on npm install. The scripts collect the installer's whoami,...

Malicious code in cilm-ui-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 008641dff89b7e4b86993671997e965642fab5620006c5ece0827f0fe72fe0d9 On npm install, the preinstall hook executes index.js which collects host identity data os.hostname, os.userInfo.username, os.homedir, current workin...

MAL-2026-13943 Malicious code in cilm-ui-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 008641dff89b7e4b86993671997e965642fab5620006c5ece0827f0fe72fe0d9 On npm install, the preinstall hook executes index.js which collects host identity data os.hostname, os.userInfo.username, os.homedir, current workin...

MAL-2026-13995 Malicious code in @dsp-next-gen-ui/needs-review (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d60392260c683ff8714400794f5f621a8c040ba0846b9fabdd194c0e6fb76b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dsp-next-gen-ui/needs-review (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d60392260c683ff8714400794f5f621a8c040ba0846b9fabdd194c0e6fb76b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview cilm-ui-commons is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @hzero-front-ui/hzero-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @hzero-front-ui/themes is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview @hzero-front-ui/core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...