MAL-2026-13699 Malicious code in chai-as-bench (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487af469d8de2a3caa5e798df3a5d56e59b795c1ddc106abd1d38ed855b6fb17 The package presents itself as a chai plugin name resembles chai-as-promised, manifest description references chai assertions, but ships no...

Malicious code in dolyame-ui-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21d1f60c7f97ffdc8e698c9804d9d9116f286be7a026a9c90f6e4a1858dea18 On require'dolyame-ui-grid', index.js loads polyfill.js which selects a platform-specific asset, downloads a binary from one of four hardcoded...

Malicious code in @wethenorth12/near-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec76b158cd4b27bb2e90a492c1713c1655dcbd2f4a9fc0f03a0664d8bec8e2ed Package @wethenorth12/near-api is presented as a 'drop-in replacement' for near-api-js and falls back to require'near-api-js' if installed. On requir...

CVE-2025-0514: Improper Input Validation

Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on activation.This issue affects LibreOffice: from 24.8 before 24.8.5...

USN-2253-1 libreoffice vulnerability

It was discovered that LibreOffice unconditionally executed certain VBA macros, contrary to user expectations...