655 matches found
CVE-2026-16492 umijs umi GIT File Helper getFileGitIno.ts git.getFileCreateInfo os command injection
A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of the file packages/utils/src/getFileGitIno.ts of the component GIT File Helper. This manipulation causes os command injection. The exploit has been made available to the public a...
CVE-2026-16492 umijs umi GIT File Helper getFileGitIno.ts git.getFileCreateInfo os command injection
A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of the file packages/utils/src/getFileGitIno.ts of the component GIT File Helper. This manipulation causes os command injection. The exploit has been made available to the public a...
CVE-2026-16492
CVE-2026-16492 affects the umijs umi project up to version 4.6.63, specifically the GIT File Helper’s function git.getFileCreateInfo in the file packages/utils/src/getFileGitIno.ts . This manipulation enables an OS command injection, with a public exploit available. A fix is provided in version 4...
Malicious code in @metaplex-foundations/umi-public-keys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48abfc0f902cd0f09b0c2ae7449eaefbf3b4baf1cb12e4165f509b86f7ad8692 The package @metaplex-foundations/umi-public-keys was found to contain malicious code. Source: ghsa-malware...
Malicious code in gifa-otatu-umi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3083a47f6c49af4f00396ddccf05ba1adffcc400e88f529d85d71fcbae842d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-155304 Malicious code in gifa-otatu-umi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3083a47f6c49af4f00396ddccf05ba1adffcc400e88f529d85d71fcbae842d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in umi-pecel76-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0f22dc9cb161f007de8b7dd8b151583620260b0fc4ffdc0b9c6c53f168f5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in umi-saguer70-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d54d60cf8a56273bbadca13e99872d0ce1b49c930e00e1065db8678e0fc5a269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in umi-sroto75-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c7ec55cd7252e29814f0bcbd4c55a299ef62eb734f283357bf579a9afa043cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in umi-botok51-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97b71e04133e2205d0c77932b16771363d0f9960450d0c9d5abc280284d9bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in umi-serimuka60-sumpek (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09f99cd29e7cb2f5dfd394da17cf073f95e3be8237939d70d907d8ec88f2c87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in umi-kue64-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e6dd1280267cbb2f667aed02371c189ca93fd8101b76ae608d1696ab412545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in umi-keripik9-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8329ad0990c07eab4d25b1e0e56a5d7e8c792fda55c7a7c5098ac37e870fc4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in umi-rangginang35-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 918e95a60eb3d1ca7a1b1990dc10f2ff14f12c8499763eb38cca6f7c86ea6c3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-101342
Malicious code in umi-empal60-riris npm...
EUVD-2025-101310
Malicious code in umi-liwet89-riris npm...
EUVD-2025-101312
Malicious code in umi-lapis82-riris npm...
EUVD-2025-101319
Malicious code in umi-kupang34-riris npm...